XP Antivirus Pro 2010

March 10th, 2010
Home » Rogue Antispyware » XP Antivirus Pro 2010

XP Antivirus Pro 2010 description

XP Antivirus Pro 2010 is a fraudulent security tool. It shows fake scan results and fabricated security alerts. It also usually states your computer is in danger and you have to remove all infections from your PC by paying small fees for supposedly legal security program.

This is all scam. It shouldn’t be trusted at all. What is more, the parasite spreads via trojan which enters your system through its vulnerable places. Numerous alerts that malware shows can be ignored and  it will not be dangerous to your PC. One of the alerts can be shown as a scam:

XP Antivirus Pro 2010 Firewall Alert! XP Antivirus Pro 2010 has blocked a program from accessing the Internet
Internet Explorer is infected with Trojan-BNK.Win32-Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.

However, you have to choose decent security tool and terminate malicious program.

Manual XP Antivirus Pro 2010 Removal


XP Antivirus Pro 2010 processes:

av.exe
Help: A Guideline of Killing Malicious Processes


XP Antivirus Pro 2010 registry values:

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "av.exe" /START "firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "av.exe" /START "firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "av.exe" /START "iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
Help: How to edit windows registry entries


Other malicious XP Antivirus Pro 2010 files:

%Documents and Settings%\[UserName]\Application Data\av.exe
%Documents and Settings%\[UserName]\Application Data\WRblt8464P

The manual removal of files and registries should be performed by experienced users. A system can be badly affected if any error is done during the manual removal. We recommend using automatic removal tools to delete XP Antivirus Pro 2010, if you are not familiar with deleting malware manually.

Leave a Reply