asked on 4th Jul 2011 | 1 Answers | Answer It!
XP Security 2011 can be removed manually by following the steps below:
With all programs closed, click the Start Menu and go to the Control Panel.
Locate the Add/Remove Programs icon and double click it.
Locate XP Security 2011 in the list of programs. If you find it, select it and remove it. If you cannot find XP Security 2011, you can continue to step 5.
Restart your computer.
Close all open programs and windows on your desktop.
Open your registry editor (regedit) program by going to Start Menu, type in regedit, and click OK.
Caution: Do not use a registry editor to edit the registry directly unless you have no alternative. The registry editors bypass the standard safeguards provided by administrative tools. These safeguards prevent you from entering conflicting settings or settings that are likely to degrade performance or damage your system. Editing the registry directly can have serious, unexpected consequences that can prevent the system from starting and require that you reinstall Windows 2000Find all of the following registry entries and delete them.
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1″ %*
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1″ %*
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “XP Security 2011″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKEY_CLASSES_ROOT\pezfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1″ %*
HKEY_CURRENT_USER\Software\Classes\pezfile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1″ %*
HKEY_CLASSES_ROOT\pezfile
Delete all of the following files that are associated with XP Security 2011 from your computer.
C:\Documents and Settings\[USERNAME]\Local Settings\Application Data\ave.exe
C:\WINDOWS\Prefetch\AVE.EXE-3098ECAE.pf
%Documents and Settings%\[AllUsers]\[RANDOM CHARACTERS]
%AppData%\ave.exe
%UserProfile%\Local Settings\Application Data\opRSK
%UserProfile%\AppData\Local\opRSK
C:\Documents and Settings\All Users\Application Data\y7V11
C:\Documents and Settings\[USERNAME]\Local Settings\Application Data\y7V11
%Documents and Settings%\[UserName]\Local Settings\Application Data\[RANDOM CHARACTERS].exe
%Documents and Settings%\[UserName]\Templates\[RANDOM CHARACTERS]
%UserProfile%\Local Settings\Application Data\MSASCui.exe
%UserProfile%\AppData\Local\MSASCui.exe
%Temp%\pw.exe
C:\Documents and Settings\[USERNAME]\Local Settings\Temp\y7V11
C:\Documents and Settings\[USERNAME]\Templates\y7V11
%Documents and Settings%\[AllUsers]\Application Data\[RANDOM CHARACTERS]
%Temp%\[RANDOM CHARACTERS]
%UserProfile%\Local Settings\Application Data\pw.exe
%UserProfile%\AppData\Local\pw.exe
%UserProfile%\Start Menu\Programs\XP Security 2011
If you have issues deleting any of the previously listed files that are associated with XP Security 2011, you can try rebooting your computer into safe mode. Booting into safe mode may allow certain malicious files to be deleted.
After locating and deleting the previous files you must remove all directories associated with XP Security 2011 by going to the C:\ProgramFiles\XP Security 2011 folder, select it, and delete it. In some cases you may not be able to find this directory. You can still continue to the next step.
Restart your computer. You do not need to boot into safe mode at this point. You should have removed XP Security 2011 completely from your computer. If you find that XP Security 2011 is still on your computer, you can repeat the steps again or go to the automatic XP Security 2011 removal process.

Here's to Good Karma





Processing your request, Please wait....

Enter your OpenID URL
http://
Proceed
Enter your WordPress.com blog URL
http://.wordpress.com
Proceed