XP Anti-Virus 2012

7 June 2011 Rogue 7 Comments

XP Antivirus 2012 is definitely bogus security software that force its way inside target computer in the same manner as Trojans, viruses and worms. Once inside, XP Antivirus 2012 virus will take full jurisdiction and manages to direct operation in general. Usually, fake security application gets loaded onto system in a cheating form of Windows update, multimedia decoder, Adobe Flash update or any similar illusory course of action. Deceived computer users may actually download and install XP Antivirus 2012 in the background while setting-up legitimate software.

Occurrences of XP Antivirus 2012 will be the cause of severe irritation while using the computer. Display of false advertisements is released alternately discovering quite a few of virus infections. Obvious motif for this misleading process is to trick victims and later influence them to procure the paid version of XP Antivirus 2012. Without the registered version, malware is determined to obstruct computer’s operation. The program costs U.S. $80, truly a pricey and useless product. The same retail value is offer for other versions such as Vista Antivirus 2012 and Win 7 Antivirus 2012.

It is crucial to remove XP Antivirus 2012 at an early stage. A possibility to hook up to a remote server is anticipated as the malware is planning to upgrade its module to strengthen the existence. By means of valuable anti-malware software suggested on this page, automatic removal of XP Antivirus 2012 is achievable.

Screen Shot Image:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Malware Behavior
If XP Anti-Virus 2012 is installed, it will begin to display fake alerts as an scare tactics to mislead victims:

System Hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.

Privacy threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair

Once malware is running on the computer,

Added Registry Entries:

HKCU\Software\Classes\.exe "(Default)" = 'bg'
HKCU\Software\Classes\bg\shell\open\command "(Default)" 
= "%LocalAppData%\(random 3 characters).exe" -a "%1" %*
HKCU\Software\Classes\.exe\shell\open\command "(Default)" 
= "%LocalAppData%\(random 3 characters).exe" -a "%1" %*
HKCR\bg
HKCU\Software\Classes\bg "(Default)" = 'Application'
HKCU\Software\Classes\bg "Content Type" = 'application/x-msdownload'
HKCU\Software\Classes\bg\DefaultIcon "(Default)" = '%1'
HKCR\.exe\shell\open\command "(Default)" 
= "%LocalAppData%\(random 3 characters).exe" -a "%1" %*
HKCR\bg\shell\open\command "(Default)" 
= "%LocalAppData%\(random 3 characters).exe" -a "%1" %*
HKCR\bg\shell\open\command "IsolatedCommand" 

Associated Files and Folders:

%LocalAppData%\(random characters)
%LocalAppData%\(random 3 characters).exe
%UserProfile%\Templates\(random characters) 
%CommonAppData%\(random characters)
%Temp%\(random characters)

Restore Windows Components:

If this virus have infected the system, registry and legitimate Windows files are also compromised. System Restore can reinstate clean system files by restoring the configuration to an earlier date. If a restore point was created before you got infected with XP Anti-Virus 2012, please restore Windows to previous configuration.

Automatic Removal Procedure

1. First thing to do is to reboot the computer in Safe Mode with Networking to avoid XP Anti-Virus 2012 from loading at start-up. You may want to print this procedure as we have to restart the computer to complete the removal process.
- Restart the computer.
- Before Windows begins to load, press F8 on your keyboard.
- It will display an Advanced Boot Options menu. Please select Safe Mode with Networking.
- Windows will now start in Safe Mode.

2. Download removal software and save it on your Desktop or any location on your PC.
3. When finish downloading, double-click on the file to install the application.
4. Follow the prompts and install with default configuration.
5. Before the installation completes, you need to update the database.

6. Click Finish. Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
7. When finished updating, the tool will run. Select Perform full scan on main screen to check your computer thoroughly.
8. When scanning is finished click on Show Results.
9. Make sure that all detected threats are checked, click on Remove Selected. This will delete all files and registry entries that belongs to XP Anti-Virus 2012.
10. Restart your computer.

Note: If XP Anti-Virus 2012 prevents mbam-setup.exe from downloading. Download the software from another computer. Renaming it to something like 'anything.exe' can help elude the malware.