XP Security Center

20 May 2008 2 Comments

XP Security Center is a rogue security program that misleads user into buying the paid version by displaying fake scan results. XP Security Center was developed and spread by fraud Software Company and advertised using Trojans and fake security websites.

When installed on the computer, XP Security Center may cause several malfunction and troubles ranging from simple browser redirect to total disability of the PC. The rogue program also possesses a capability to end security related programs like anti-virus and firewall.

Infection caused by XP Security Center virus should be dealt with high priority before it can further jeopardize the system. Scan the computer with legitimate anti-malware program to remove files and registry entries associated to XP Security Center.

Screen Shot Image:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista

Malware Behavior
While XP Security Center is running on the computer, it repeatedly exhibit fake security warnings stating a number of errors. The pop-up messages may contain this alert:

XP Security Center – Unregistered Version
WARNING! XP Security Center has found 28 useless and UNWANTED files on your computer!
- Personal data at the reach of anyone’s hand
- Internet history records available
- Compromising and adult material stored on your system
- Chat sessions’ logs and personal Emails easily reachable
You need to register XP Security Center to clean the unwanted files found. Click “Register now” button below to obtain the license key and remove useless or compromised material from your PC.

Added Registry Entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"XP SecurityCenter" = ""C:\Program Files\XPSecurityCenter\XPSecurityCenter.exe" /hide"

Associated Files and Folders:

%UserProfile%\Local Settings\Temp\Binaries1.zip
%UserProfile%\Local Settings\Temp\Binaries2.zip
%UserProfile%\Local Settings\Temp\Binaries3.zip
C:\Documents and Settings\All Users\Desktop\XPSecurityCenter.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\XPSecurityCenter\Uninstall.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\XPSecurityCenter\XPSecurityCenter.lnk
%ProgramFiles%\XPSecurityCenter\data\daily.cvd
%ProgramFiles%\XPSecurityCenter\htmlayout.dll
%ProgramFiles%\XPSecurityCenter\install.exe
%ProgramFiles%\XPSecurityCenter\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest
%ProgramFiles%\XPSecurityCenter\Microsoft.VC80.CRT\msvcm80.dll
%ProgramFiles%\XPSecurityCenter\Microsoft.VC80.CRT\msvcp80.dll
%ProgramFiles%\XPSecurityCenter\Microsoft.VC80.CRT\msvcr80.dll
%ProgramFiles%\XPSecurityCenter\pthreadVC2.dll
%ProgramFiles%\XPSecurityCenter\un.ico
%ProgramFiles%\XPSecurityCenter\unzip32.dll
%ProgramFiles%\XPSecurityCenter\XPSecurityCenter.dll
%ProgramFiles%\XPSecurityCenter\XPSecurityCenter.exe
%ProgramFiles%\XPSecurityCenter\XP_SecurityCenter.cfg

How to Remove XP Security Center

Automatic Removal of XP Security Center using Malwarebytes' Anti-Malware

In order to completely remove the threat, it is best to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.