How to remove XP Smart Security 2010?
What is XP Smart Security 2010?
XP Smart Security 2010 is the one that you should mark as rogue anti-spyware because it imitates scanning of the system actions, reports only invented viruses and does this job seeking to rip you off. XP Smart Security 2010 can change its name according to the OS it finds on your computer, so if you have Windows Vista for example, it will present itself as Vista Smart Security 2010, so be attentive.
Trying to spoof users out of money, XP Smart Security 2010 compromises computers unnoticed with the help of Trojans or fake online scanners. Without being given any notification from the security programs they have, people see its name only when rogueware starts “scanning” their computers. Don’t take XP Smart Security 2010 scanners serious! They will start at once computer boots up because the executable file ave.exe which is also installed into the system and launches malware instead of any other process.
People exclude that computer infected with XP Smart Security 2010 becomes totally disordered and follows all the malware’s commands. When on board, program starts its promoting activity and shows security alerts, pop-up ads and other notifications trying to reach its goals. The whole misleading tactics is finished by redirections to the malicious domains where people are totally pushed into purchasing so called “full” version of it. Bear in mind that warnings of XP Smart Security 2010 shouldn’t be trusted because they tell invented facts and find fake viruses. Moreover, the “full” version of XPSmartSecurity2010 is useless, so save your money instead!
XP Smart Security 2010 will keep its browser hijacking techniques until it won’t be removed, so don’t waste your time. If you want to get rid of this badware, please get a reputable anti-spyware because XP Smart Security 2010 applies methods that make it hardly removable from the infected PC. Do a full system scan with your anti-spyware and follow the steps at first when eliminating XP Smart Security 2010:
1. Click Start->Run (or WinKey+R). Input: “command”. Press Enter or click OK.
2. Type “notepad” as shown in the image below and press Enter. Notepad will open.
3. Copy and past the following text into Notepad:
[-HKEY_CURRENT_USERSoftwareClassessecfile]
[-HKEY_CLASSES_ROOTsecfile]
[-HKEY_CLASSES_ROOT.exeshellopencommand][HKEY_CLASSES_ROOTexefileshellopencommand]
@=””%1″ %*”
[HKEY_CLASSES_ROOT.exe]
@=”exefile”
“Content Type”=”application/x-msdownload”
4. Save file as “exefix.reg” (without quotation-marks) to your Desktop.
NOTE: choose Save as type: All files
5. Double-click to open exefix.reg. Click “Yes” for Registry Editor prompt window.
6. Download Spyware Doctor or an automatic removal tool below. Update Spyware Doctor and run a full system scan.
XP Smart Security 2010 is Extremely dangerous
XP Smart Security 2010 is a corrupt Anti-Spyware program XP Smart Security 2010 may spread via Trojans XP Smart Security 2010 may display fake security messages XP Smart Security 2010 may install additional spyware to your computer XP Smart Security 2010 may repair its files, spread or update by itself XP Smart Security 2010 violates your privacy and compromises your security
detection Note: Spyware doctor trial provides detection of parasite like XP Smart Security 2010 detection and limited protection for free. You can remove detected files, processes and registry entries yourself or purchase a full version. Learn why we have choosen spyware doctor.
Manual XP Smart Security 2010 removal
Important Note: Although it is possible to manually remove XP Smart Security 2010, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Spyware Doctor or other malware and spyware removal applications found on 2-viruses.com. Stop these XP Smart Security 2010 processes:
Remove these XP Smart Security 2010 Registry Entries:
Remove these XP Smart Security 2010 files:
It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other XP Smart Security 2010 infected files and get help in XP Smart Security 2010 removal by using free Spyware Doctor scanner. It comes with free real-time protection module that helps preventing XP Smart Security 2010 and similar threats.
XP Smart Security 2010 is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only XP Smart Security 2010 can help you to remove it after you download the trial version. As soon as the victim downloads XP Smart Security 2010 trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, XP Smart Security 2010 offers to buy the full version to fix these false errors. If the user agrees, XP Smart Security 2010 does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.
Some Rogue Anti-Spyware, such as XP Smart Security 2010, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install XP Smart Security 2010, which is another way for Rogue Anti-Spyware to spread itself.
Most of rogue Anti-Spyware, such as XP Smart Security 2010, is nearly impossible to remove manually.
This worked! I did the registry removal suggestions that you had. They did remove some of the icons in my information area but I really didn’t need them anyway. Actually solved quite a few problems. Thanks!
Thank you for telling me this, but I appear to have found it too late. Every program of mine, when I try to open it, besides Firefox, Internet, and one other, say “Application not found.” And Firefox and the Other program say “Open this type of file with: (List)” Once I click “Internet” Internet pops up and it says “Would you like to save this program? (Run) (Save As) (Cancel)” and should I hit either Run or Save As, the proccess repeats, endlessly. Help me, please?
You got file associations messed up, Kasper.
You can fix them going to My Computer, Tools, Folder Options, then clicking on File Types. There you will see all the registered file types in Windows, pick the file type you are having problems with and click on the Change button. After picking the program you want, click on Ok, then on Close. You may want to restart your PC to be sure.
Additionally, I would recommend getting and running Registry optimizer once you fix exe file permissions.
I have this software come into my laptop, and it is shutting down everything. the XP home edition doesn’t boot. I am trying to do restore through safe mode, but it still doesnt happen. It goes back to the option to choose safe mode. Also the regedit doesnt open…WHAT DO I DO…
I had this (the file though was ave.exe) but the above removal guide didnt do the trick for me – I had to manually alter settings in regedit. If u do so be carefull!!! just make a search in regedit for av.exe or ave.exe and delete the value saying something like “C:\user\…\Application Data\ave.exe \ /Start” – its important that u do not delete the original value (Things like ”%1″ %*)
And in order to search for the file and delete it u will have to show systemfiles and uncheck the box regarding operation system files (XP) – the av.exe/ave.exe file is located as shown above when u search in regedit.
Good luck
My shortcuts on the desktop dont work. Is there a way to fix this? I can also not open any executable file!!!!
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command]
@=”\”%1\” %*”
[HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command]
@=”\”%1\” %*”
[HKEY_CLASSES_ROOT\.exe\shell\open\command]
@=”\”%1\” %*”
[HKEY_CLASSES_ROOT\secfile\shell\open\command]
@=”\”%1\” %*”
>> Kasper and chris , copy above lines and save as “fix.reg” and run to fix “shortcuts” to work
I got this a couple days ago on my son’s desktop. I worked for a couple hours trying to find it to remove it. As a last ditch effort before going to bed, I restored the computer to a few days before. It seemed to do the trick. Haven’t had any pop ups since.
Your registry entry that used to look like this:
iexplore.exe
is used to open Internet Explorer. Your registry entry that looks like this:
av.exe /START iexplore.exe
is used to open av.exe, which starts up Internet Explorer after modifications that direct you only to sites that tell you to buy the product.
Your registry entry that looks like this:
av.exe /START “%1″ %*
runs av.exe anytime you try to run an executable (.exe prefix), which stops you from running various spyware removal programs.
You should only remove everything up to and including /START.
if this don’t work im gonn be pissed
i did the fix and I accidentally deleted everything in the key values including @=”\”%1\” %*”
i saved that registry file that Bala pasted but when i run it it tells me that i cannot modify the registry from anywhere except regedit.
the only problem is that regedit won’t run because it asks me “what program to use to open this file”
now what…?!
@Chuckles
nevermind, i added “windows registry editor version 5.00″ to the top and it worked.
but programs still can’t be run. why is this?
@Chuckles
Oh, i just figured it out.
Bala’s fix works perfectly, except when you copy and paste it off the comments section like i did, the quotes are strange. If you copy and paste it, erase the quotes and manually type them back in within Notepad and it will work.
Hellpp!! So I tried to copy paste the thing into notepad, but it stops at the ‘Software’ in the very first part. I’m hopeless at technology-related things, so please help!
So I figured out that part, but I can’t seem to get my anti-malware thing up….
Yaaay!! This really helped me. At first I was having trouble because I followed the instructions, and then I read all of the comments. I just wanted to say THANK YOU! I’m not super efficient at taking care of my laptop and this was really helpful. =)
oh and I was just wondering, but I tried to use spydoctor but I have to pay to remove it. I already have AVG 9.0 installed in my laptop. Can I use that in order to detect and remove it? Or is spydoctor absolutely necessary?
Aimy : Spyware doctor is better at removing fake antiviruses, trojans and rootkits as AVG free. Typically, Most of antiviruses add removal for fake rogues later than anti-malware applications.
This a dumb question, but how do you run .reg files? I clicked yes to add it to the registry and it worked, so what do I do next?
@James
Forget it, I figured it out.
hello , i tried everything that was suggested in here an still nothing , i cant open any app , spy doctor or anything , amazingly i was able to sigh on yahoo messenger an go into firefox from there but other then that nothing else will start , cant even do a system restore
dont even know how this got on my comp , just started earlier today
thank you for your solution.
Ok, so I did everything in the instructions, but when I down loaded Spyware doctor it will not let me update it. So I can not scan my computer. I went to PCtools.com and sent them and email, still waiting for a reply from them. If anyone had the same problem and got it working I’d love to get some advice.
HELP!!! I JUST DELETED RUNDLL32.EXE!!! HOW DO I FIX THAT!!!???
I located my files under ave and ave.exe … pop-ups have stopped. That was also the files names used in the registry under the folders you recommend we check.
I followed all this stuff.. but now it won’t let me open any exe. files like firefox or notepad. I did what Kasper did and messed up the file associations. I tried following what you said to change it but it doesn’t do anything. I’m scared to close out of firefox right now for fear it won’t open up again..
>
@Taylor
I am having the same trouble as Kasper and Taylor. I tried to follow the directions to go through My Computer – Tools – Folder Options, but I am completely lost. I have no idea what to look for on the list…When I tried to use the add/remove program function or to restore my pc back to a previous date I get a the following message: C:\WINDOWS\system32\rundl32.exe Application not found. Any other suggestions?
I can’t even try to do the removal process because when I run “command” I get a “16 bit MS-DOS Subsystem” error that says “C:\WINDOWS\system32\command.com
C:\WINDOWS\SYSTEM32\AUTOEXE.NT. The system file is not suitable for running MS-DOS and Microsoft Windows applications. Choose ‘Close’ to terminate the application.” How do I fix this?
Does all of this need to be performed while in safe mode or safe w/command prompt?
I used the method and it said it the fix was succesfully added to the registry, does this mean I did it right? Sorry, it is a silly question, I am just paranoid. I restarted my computer, Verizon Security’s start up appeared and I am running a scan, I am running a full scan with Spyware Doctor, and my Internet connection is working. My Internet browser is running quickly and seems fine. Are these all good signs? Can I verify this worked? Is there anything else I should do?
Uh, sorry still paranoid. My Intertnet is acting strangly -scripts are unresponsive- and my icons dissappered for a minute or two. Programs are not responding, including Spyware Doctor. I keep loosing Internet connection and so on. Aaah!! Help please!
Hi, I was wondering whether other people had bought the spyware doctor to get rid of this xp smart security thing? i’m just a little wary of putting credit card details onto the computer now, since we have this virus that can access information on our computer..Help!
Will : In most cases rogues do not use (real) keyloggers, they try to convince giving away information on their own website. Additionally, if a parasite is detected during free scan, it is partially disabled by free spyware doctor. If your version is not detected by free spyware doctor scanner, I would not purchase it without contacting PCTools support first.
Also, it is critical to update Spyware Doctor prior scanning pc and perform full scan.
Please help me!!! I did that and it still did’nt work?
I tried downloading and updating, but every time I try to update it the XP Smart Security Stops it… I don’t know what else to do and I’m Stuck. Would be greatly appreciated if someone can help me with this problem, or do I have to restore my computer?
Romeo : use safe mode with networking. You might need to stop trojan process before download. Read the part about processes you have to stop.
I can’t edit my registry because the stupid virus has deactivated my abiliy to use regedit by making it appear the system administrator has disabled the ability to use regedit. Additionally, using the technique above to set up that notepad file on my desktop does not work for the same reason. It continues to block my attempts to edit the registry, please help…
Lee : try creating another administrator account or rebooting into safe mode.