XP Antimalware 2010

XP Antimalware 2010 description

XP Antimalware 2010 a.k.a. XP Antimalware, is a rogue anti-spyware application often downloaded via trojan which enters user’s system without their knowledge and consent. Trojan finds system’s vulnerable places and sneaks into user’s computer. Holes which it makes is a perfect for the parasites to ruin your PC.

As it is common for malwares this one is not an exception. It also starts rogue scans and shows it to you. These warnings and security alerts are fabricated and user should not believe any of it. The information about system’s infections is fabricated and only can be deleted with decent security tool and not with a fake one. XP Antimalware 2010 tires to trick user and make them purchase malicious anti-spyware application. This is all scam and must be deleted upon detection.

Manual XP Antimalware 2010 Removal

XP Antimalware 2010 processes:

av.exe
Help: A Guideline of Killing Malicious Processes

XP Antimalware 2010 registry values:

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “av.exe” /START “firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “av.exe” /START “firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “av.exe” /START “iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1?
Help: How to edit windows registry entries

Other malicious XP Antimalware 2010 files:

av.exe