Home Blog

XP Security 2012 Uninstall Guide – How to Remove XP Security 2012 safely

Posted by in Blog Rogue Program
on September 18th, 2012 | Leave a comment
remove XP Security 2012

remove XP Security 2012

XP Security 2012 is a fake antivirus program in the category of malware like XP Antivirus 2012 which is promoted and advertised by spyware and Trojan. Compromised computers will get lots of pop up ranging from advertisement, fake security alerts to fake security reports. XP Security 2012 uses those tricks to urge a victim to purchase the full version. What will happen after you purchase XP Security 2012? Nothing! You lose your money and still have the problems such as

  • Desktop and taskbar disappear
  • Can not access any exe file
  • Unable to access internet

Do you want to know how to remove XP Security 2012 completely? There are two common methods to remove XP Security 2012 from your computer

Available Manual Removal Instructions for XP Security 2012
Usually we can use the Add/Remove Programs in the Control Panel to get rid of an unwanted application from computer. But as XP Security 2012 is rogueware and would deeply root into your system by modifying your registry entries, also it leaves behind some tracks that will have to be removed manually. To completely delete every piece of XP Security 2012, you can follow tips below:
1. Restart your computer in safe mode. To do this press the F8 and then when the menu appears choose safe mode with networking.
2. Terminate malicious process from Windows Task Manager. To do this press CTRL+ALT+DELETE, close those running processes which may contain insecure factors.
3. Delete XP Security 2012 registry entries from registry editor. To do this click Start-> select Run-> In “Open” box type “regedit” ->Click OK.

HKCU\Software\Classes\pezfile
HKCR\pezfile
HKCU\Software\Classes\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1″ %*
HKCU\Software\Classes\pezfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1″ %*
HKCU\Software\Classes\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “%1″ %*
HKCU\Software\Classes\pezfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “%1″ %*
HKCR\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1″ %*
HKCR\pezfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1″ %*
HKCR\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “%1″ %*
HKCR\pezfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “%1″ %*
HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
HKLM\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
HKLM\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″

4. Use the Find/Search engine on your computer, search for all the available XP Security 2012 files and then delete them.

%UserProfile%\Local Settings\Application Data\opRSK
%UserProfile%\Local Settings\Application Data\pw.exe
%UserProfile%\Local Settings\Application Data\vz.exe
%UserProfile%\Local Settings\Application Data\MSASCui.exe
%UserProfile%\AppData\Local\opRSK
%UserProfile%\AppData\Local\pw.exe
%UserProfile%\AppData\Local\vz.exe
%UserProfile%\AppData\Local\MSASCui.exe

Once you have run these steps restart of your computer to get rid of this fake software from your PC for good.

Most effective way to remove XP Security 2012
For computer novice, the best advice we offer for you is to running Spyware Cease. It is one of the most professional programs in the computer security industry.With Spyware Cease, you can conduct a automatic XP Security 2012 removal within minutes. Get your hands on Spyware Cease as soon as you can. It also keeps your computer secure all the time.

Automatically scan your PC for XP Security 2012 with Spyware Cease

  1. Download Spyware Cease on your computer for free.
  2. Run a scan to detect any infections.
  3. After you’ve detected XP Security 2012, select the detected items and click Remove.
  4. Restart your PC and run another scan to check for any other traces of XP Security 2012.

Leave a Reply