The XP Anti-Spyware 2012 malware is a fast spreading fake utility that is affecting a lot of computers nowadays.  The first reason why it spreads so easily is because it utilizes such a familiar name to many computer users. Much like many of the new malwares, it also has the capability of changing its name to Win 7 Anti-Spyware 2012 or to Vista Anti-Spyware 2012, it deceives computer users who are not familiar with how rogue utility works and takes advantage of people who are gullible enough to send money to shady companies.  The XP Anti-Spyware 2012 virus disguises itself as a legitimate utility which will help you remove spywares in your system, the truth is, this software will break through your system’s defenses by looking for weak spots and utilizing the back door so that it can infect your computer.

The XP Anti-Spyware 2012 malware will not actually infect your computer right away, it will wait for a certain time before it will manifest itself usually through messages and alerts. It will basically inform you that there is something wrong with your computer and that you need an XP Anti-Spyware 2012 program to fix it. These are all false alerts and they are just basically utilized to persuade you into buying full versions of their products, if you buy it, the virus creator will get your money and you will not get anything in return. In a way, it is just a modern way of stealing your money, therefore, the best way to get rid of this virus is not by doing what it tells you, but by removing certain files from your computer.

Steps to follow for XP Anti-Spyware 2012 Manual Removal

Please make sure that you will not go through the manual removal without backing up your system just in case you make any mistakes in the process. It is strongly recommended that you double check the files that you are about to delete, the XP Anti-Spyware 2012 manual removal requires accuracy since any errors will cause serious damage to your system.

Delete the following XP Anti-Spyware 2012 registry files:

• HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = ‘exefile’
• HKEY_CURRENT_USER\Software\Classes\.exe “Content Type” = ‘application/x-msdownload’
• HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = ‘%1? = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
• HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “IsolatedCommand” = ‘”%1? %*’
• HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “(Default)” = ‘”%1? %*’
• HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1? %*’
• HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’
• HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’
• HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1?
• HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
• HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1? %*’
• HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1? %*’
• HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “IsolatedCommand” – ‘”%1? %*’
• HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
• HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe”‘
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe” -safe-mode’
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Internet Explorer\iexplore.exe”

Delete the following XP Anti-Spyware 2012 files:

• %AllUsersProfile%\[random]
• %AppData%\Local\[random].exe
• %AppData%\Local\[random]
• %AppData%\Roaming\Microsoft\Windows\Templates\[random]
• %Temp%\[random]

Please keep in mind that the XP Anti-Spyware 2012 manual removal requires precision and a certain level of technical skill,  and it does not guarantee a complete removal. If the malware is not completely removed, some objects can stay hidden and can reanimate itself  when it is not completely removed. If you do lack the skill to remove the files, you need to be aware that any slight deviations from what is supposed to be deleted can lead to an irreparable system corruption. The automatic removal of the XP Anti-Spyware 2012 malware is highly recommended.

If you need assistance removing XP Anti-Spyware 2012 spyware or have other PC, Server or Laptop problems call us at 800-643-2638 or email us atSupport@ExpertSupportNow.com. We can speed up your system and fix most problems remotely through the internet while you watch!

 

Be Sociable, Share!

•