XP Security 2011 Fake AntiSpyware Program Details and XP Security 2011 Removal Process

XP Security 2011 is a program that many computer users have recently encountered in an unusual fashion. They have basically witnessed their PC displaying numerous popup alerts rendered from the XP Security 2011 program. It has been discovered that XP Security 2011 is a fake security application that uses aggressive techniques to trick computer users into purchasing a full version of the XP Security 2011 program.

Computer users must understand that XP Security 2011 was made by hackers. These unruly hackers want to ultimately get unsuspecting computer users to buy the XP Security 2011 by making the computer users think that they need to buy the XP Security 2011 program to remove threats that it detected on their system. Not only are the threats that XP Security 2011 detects fabricated, but XP Security 2011 does not have the capability to remove any of them. With that said, it should be known that XP Security 2011 is basically a worthless program. If a computer user ever notices XP Security 2011 installed on their system, they should take the necessary precautions to remove it which usually involves using an updated spyware removal application that is backed by a reputable security company.

How Can You Remove XP Security 2011?

XP Security 2011 can be very difficult to manually remove if you are an inexperienced computer user. Not to mention, XP Security 2011 has been known to populate the Windows Registry with many different entries and removing the wrong entries could render a PC damaged or useless. The use of a reputable antispyware or antivirus tool is recommended to safely remove XP Security 2011 from your Windows computer.

To easily remove XP Security 2011, find the following process and end them in the task manager. After that is done, delete each related XP Security 2011 file from your hard drive. In additional to locating the following processes, it is recommended that you delete the XP Security 2011 registry entries listed below as well. It is also a good idea to uninstall the XP Security 2011 application via your add/remove programs function found in the Windows Control Panel if your system recognizes XP Security 2011 has an installed program.

XP Security 2011 files (and folders) to remove:

  • C:\Documents and Settings\[USERNAME]\Local Settings\Application Data\ave.exe
  • %Documents and Settings%\[UserName]\Local Settings\Application Data\[RANDOM CHARACTERS].exe
  • %AppData%\ave.exe
  • %UserProfile%\Local Settings\Application Data\MSASCui.exe
  • %UserProfile%\Local Settings\Application Data\pw.exe
  • %UserProfile%\AppData\Local\MSASCui.exe
  • %UserProfile%\AppData\Local\pw.exe
  • %Temp%\pw.exe

XP Security 2011 registry entries to remove:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
  • HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1″ %*
  • HKEY_CLASSES_ROOT\pezfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1″ %*
  • HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\pezfile
  • HKEY_CLASSES_ROOT\pezfile
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “XP Security 2011″