Antispyware XP description
Antispyware XP is a rogue anti-spyware application which pretends to be a legitimate one. This malware can also be found as XP Defender Pro, XP Antimalware 2010, XP Security Tool 2010 malicious programs. It tries to mislead its victims into thinking their computer is infected and only registered version may clean it. This is not true and an offer from this malware is fraud. Do not buy it, because it is a malicious program.
This scam is released by bad people that want to misappropriate your money. Do not fall for this blatant scam. It’ll display you numerous pop-ups stating your computer is at a high risk. It is our concern to tell you that malware’s supposedly full version can’t provide any security services. That is why none of the information shouldn’t be trusted. The best thing you can do is to ignore those fake threats and delete the parasite upon detection. Choose reputable anti-spyware program and get rid of Antispyware XP.
Manual Antispyware XP Removal
Antispyware XP processes:
ave.exe
Help: A Guideline of Killing Malicious Processes
Antispyware XP registry values:
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1″ %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1″ %*
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1″ %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%Program Files%\Internet Explorer\iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1″ %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%Program Files%\Mozilla Firefox\firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%Program Files%\Mozilla Firefox\firefox.exe” -safe-mode
Help: How to edit windows registry entries
Other malicious Antispyware XP files:
%UserProfile%\AppData\Local\ave.exe