Windows Vista Blog

XP Antispyware 2010 (which also passes under the name of XPAntispyware2010) is an operating-system specific rogue anti-spyware related to such rogue applications as Win 7 Antispyware 2010 and Vista Antispyware 2010. It uses scare tactics to try and trick users in to paying for the full version of the software. XP Antispyware 2010 gets installed on the user’s system via Trojans that propagate throughout the internet by using dangerous websites and spam emails. Once installed on the user’s computer, XP Antispyware 2010 will perform a large number of fake security scans on the system and generate reports that state that the system is under threat from dangerous malware. It also generates fake pop-up warnings from the Windows taskbar. The aim of all this activity is to try and convince the user to purchase the ‘full’ version of XP Antispyware 2010 by claiming that the currently installed ‘trial’ version is insufficient to remove the detected ‘threats’. However, as this is merely a fake application none of its versions are even remotely capable of cleaning out malware from any system. This site XP Antispyware 2010 will help you understand more this threat.

In order to delete XP Antispyware 2010, you must stop its processes, delete its files and folders and remove its registry entries.

File Removal Procedures

The first step you need to take in order to delete XP Antispyware 2010 is to stop the following process:

• av.exe

Next, it is necessary to delete the following files and folders:

• %UserProfile%\AppData\Local\av.exe
• %UserProfile%\AppData\Local\WRblt8464P

Once the above steps have been completed, XP Antispyware no longer resides on your file system.

Registry Removal Procedures

Removing files and folders alone is not sufficient to get rid of this rogue software completely. To completely delete XP Antispyware 2010, you must remove the following keys and settings from the Windows registry:

• HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*
• HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*
• HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*
• HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “av.exe” /START “firefox.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “av.exe” /START “firefox.exe” -safe-mode
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “av.exe” /START “iexplore.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1?
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1?

Now it is prudent to say that your computer is safe from XP Antispyware 2010. However, in order to make sure of this fact it is recommended to conduct a full system antivirus scan using a genuine security product such as Spyware Doctor with Antivirus.

Conclusion

Inexperienced users are advised against attempting to delete XP Antispyware 2010 manually, as any mistake made during deletion could cause damage to the system. It is recommended that inexperienced users make use of a web-based repair service such as www.onlinecomputerrepair.org or legitimate antivirus software to successfully delete XP Antispyware 2010