Home Malware Programs Rogue Anti-Spyware Programs XP Security Tool 2011

XP Security Tool 2011

Posted: November 11, 2010

XP Security Tool 2011 is a variant of the rogue antispyware program XP Security Tool 2010. These rogues try and con computer users into purchasing their useless software by claiming that the targeted PC is infected with malware. Soon hereafter the computer user will be urged to buy a 'licensed version' of the product. Do not fall for this trickery and have XP Security Tool 2011 removed using a reliable malware remover.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %AppData%\ave.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Classes\.exeHKEY_CURRENT_USER\Software\Classes\.exe | @ = "secfile"HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIconHKEY_CURRENT_USER\Software\Classes\.exe\shellHKEY_CURRENT_USER\Software\Classes\.exe\shell\openHKEY_CURRENT_USER\Software\Classes\.exe\shell\open\commandHKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\ave.exe" /START "%1" %*"HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"HKEY_CURRENT_USER\Software\Classes\.exe\shell\runasHKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\commandHKEY_CURRENT_USER\Software\Classes\.exe\shell\startHKEY_CURRENT_USER\Software\Classes\.exe\shell\start\commandHKEY_CURRENT_USER\Software\Classes\secfileHKEY_CURRENT_USER\Software\Classes\secfile\DefaultIconHKEY_CURRENT_USER\Software\Classes\secfile\shellHKEY_CURRENT_USER\Software\Classes\secfile\shell\openHKEY_CURRENT_USER\Software\Classes\secfile\shell\open\commandHKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = ""%AppData%\ave.exe" /START "%1" %*"HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = ""%1? %*"HKEY_CURRENT_USER\Software\Classes\secfile\shell\runasHKEY_CURRENT_USER\Software\Classes\secfile\shell\runas\commandHKEY_CURRENT_USER\Software\Classes\secfile\shell\startHKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command

2 Comments

  • Michael says:

    This XP security tool crashed my laptop!! I can't even get it to boot! And worse.. I fell for it and bought the XP security upgrade!! $69 !! How do i get my money back and how do i start my computer?? HELP PLEASE!

  • Carla says:

    Michael contact the BBB, notify them of your concerns. Then file a suit with the FTC. You can do this on the internet. Then contact your CC or Bank and file a case against them topetition for your payment to be returned. Hope this helps.

Loading...