Antivirus XP 2010
Antivirus XP 2010 Description
Antivirus XP 2010 is a rogue anti-virus program which is a variation of XP Internet Security 2010. Antivirus XP 2010 gets onto your system and it starts constantly scanning your PC. Then it starts detecting files which are created in advance and recognized as malicious.
Aliases
W32/FakeSec.F.gen!Eldorado [Authentium]Win32/Adware.XPAntiSpyware.AA [NOD32]Heuristic.LooksLike.Win32.NewMalware.H [McAfee-GW-Edition]W32/FakeAlert.FY.gen!Eldorado [Authentium]Trojan.Win32.Generic.52004B62 [Rising]SHeur3.SAJ [AVG]Win-Trojan/Fakeav.189440.I [AhnLab-V3]Troj/FakeAV-BDV [Sophos]Trojan:Win32/Meredrop [Microsoft]Gen.Variant [Ikarus]
More aliases (293)
Antivirus XP 2010 Automatic Detection Tool (Recommended)
Is your PC infected with Antivirus XP 2010? To safely & quickly detect Antivirus XP 2010, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect Antivirus XP 2010
What happens if Antivirus XP 2010 does not let you open SpyHunter or blocks the Internet?
Technical Details
Visual & GUI Characteristics
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read
the tutorials on how to find malware,
kill unwanted processes,
remove malicious DLLs and
delete other harmful files. Always be
sure to back up your PC before making any changes.
- The following files were created in the system:
# File Name Detection Count 1 MSASCui.exe 724 2 ave.exe 696 3 vma.exe 489 4 MSASCui.exe 307 5 av.exe 293 6 av.exe 286
Posted: January 29, 2010 | By SpywareRemove
MoreThreat Level: 10/10
(No Ratings Yet)
Loading ...Rate this article:
Detection Count: 52
I have messed my computer up since I installed Internet Security Suite Plus 2010 and I don’t know how to fix or remove. Help..
I need to have this goofy Internet Security Suite Plus 2010 removed from my pc. I cannot do much of anything since I installed this program.
This rogue has turned off access to almost all exe file via shortcut or double click of exe file. Thus I can not activate even regedit,
any suggestions?
Thank you for the info. It helped but I still get a “open with…” dialog everytime i try to launch a program… grrrrrrrrrr this is soo annoying please tell me how to fix this.
Hi, Great, post thank you.
There are however some additional registry entries also to be gotten rid of. Pls see below. These were on my system and I got rid of them.
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
“(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program
Files\Mozilla Firefox\firefox.exe”
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “%UserProfile%\Local
Settings\Application Data\av.exe” /START “%1″ %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local
Settings\Application Data\av.exe” /START “%1″ %*
Thank you thank you thank you – your site is so easy to use.
I had a problem with the XP Antivirus 2010 as well. I found the av.exe file in documents and settings as described in the post above but also the virus had installed itself as a shell program for \”.exe\” file association. It was being called for every exe file and then it would call the program being started. This way it could intercept all programs.
If you remove av.exe as described, then no programs will start. So in addition to removing the av.exe also check the following.
On WinXP
Check the registry file for the \”exe\” file association: The only entries should be
[HKEY_CLASSES_ROOT\\.exe]
@=\”exefile\”
\”Content Type\”=\”application/x-msdownload\”
[HKEY_CLASSES_ROOT\\.exe\\DefaultIcon]
@=\”%1\”
[HKEY_CLASSES_ROOT\\.exe\\PersistentHandler]
@=\”{098f2470-bae0-11cd-b579-08002b30bfeb}\”
If you find ..\\shell\\open keys as well as the normal ones above, check the HKEY_CLASSES_ROOT\\.exe\\shell\\open\\command. If it looks similar to this:
C:\\\\Documents and Settings\\\\\\\\Local Settings\\\\Application Data\\\\av.exe\\\” /START \\\”%1\\\” %*\”
\”IsolatedCommand\”=\”\\\”%1\\\” %*\”
…then delete it.