XP Antivirus 2014

Posted: September 6, 2014

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	10/10
Infected PCs:	133

First Seen:	September 7, 2014
Last Seen:	April 1, 2020
OS(es) Affected:	Windows

XP Antivirus 2014 is a fake anti-virus application currently believed to be an offshoot of Security Essentials, XP Antivirus 2012 and similar threats. Like them, XP Antivirus 2014 may display erroneous system alerts, defraud you through a fake registration process for its software or conduct attacks against legitimate security programs. You should delete XP Antivirus 2014 at the first opportunity, and malware researchers advise taking steps to disable XP Antivirus 2014 and all other threats prior to disinfecting your PC.

When Antivirus Software Turns into Anti-Security

A probable update of previous variants of scamware from its family, the FakeRean family, XP Antivirus 2014 provides a new brand name, but otherwise has no history of innovative features that would modify its strategy. As a fake anti-virus scanner, XP Antivirus 2014 may display pop-ups warning you about specific threats (such as Trojan-Spy.HTML.Visafraud.a) or general attacks against your computer. Despite formatting these pop-ups similarly to legitimate warnings from real PC security products, XP Antivirus 2014 does not have any legitimate security functions, and malware researchers particularly discourage following links or advice provided by XP Antivirus 2014.

When not displaying its pop-up warnings, which are typical to its category of fake software, XP Antivirus 2014 also may initiate further attacks:

Your browser may be redirected to harmful websites, including fake warning pages recommending the use of XP Antivirus 2014's services.
Other applications may be closed by XP Antivirus 2014 automatically, including basic Windows tools (Task Manager, Regedit, et cetera) and legitimate anti-malware software.
XP Antivirus 2014 also may display imitation 'scans' of your PC. These scans aren't designed to detect legitimate threats, but will, instead, detect predesignated lists of fake infections. The infections often may be identified by the names of real threats, particularly high-level threats, such as banking Trojans like Trojan Zeus.

Beating Fake Security Software with the Real Thing

While XP Antivirus 2014 predominantly attempts to profit off of victims through a fraudulent registration process that XP Antivirus 2014 claims will protect your PC, XP Antivirus 2014 also may harm your machine's security in ways that could affect its vulnerability to other forms of threatening software. Distribution methods for XP Antivirus 2014 still are being outlined, but typical scamware installations include the use of other threats, such as Web browser exploits or even backdoor Trojans. Disabling XP Antivirus 2014 by any necessary measures, including booting your PC from a separate, uninfected partition, should provide your anti-malware utilities with the access necessary for removing XP Antivirus 2014 and related threats such as Antivirus 2008 Pro, Antivirus XP 2008, Windows Antivirus 2008, Vista Antivirus 2008, PC Clean Pro, Antivirus Pro 2009, Rogue.Vista Antivirus 2008, AntiSpy Safeguard, ThinkPoint, Spyware Protection 2010, Internet Antivirus 2011, Palladium Pro, XP Anti-Virus 2011, CleanThis, XP Security 2012, XP Home Security 2012 and AntiVirus PRO 2015.

However, if you've already purchased XP Antivirus 2014 or similar scamware, you should treat any credit card numbers or related financial credentials as being compromised. Communicate with your credit card company, bank or other, relevant financial institutions for further steps to take on protecting yourself from future fraudulent charges.

With respect to protecting your PC from XP Antivirus 2014, monitoring online behavior and avoiding unsafe downloads will provide the best returns for a minimal time investment required. Reliable anti-malware products also should be able to identify installers for XP Antivirus 2014, including corrupted Web pages hosting exploits that could install XP Antivirus 2014 automatically.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

f80b225563e6c5e9babcb63d355c7e384abaa32ddcd131b373b1a37c78d13d08.exe

File name: f80b225563e6c5e9babcb63d355c7e384abaa32ddcd131b373b1a37c78d13d08.exe
Size: 82.43 KB (82432 bytes)
MD5: dad3d265882d724ddab646b44f477274
Detection count: 85
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 4, 2014

f75fe7436c7a8f966793ef36bf91e69aa597650a9e16b4db1235b94e6dfc13c7.exe

File name: f75fe7436c7a8f966793ef36bf91e69aa597650a9e16b4db1235b94e6dfc13c7.exe
Size: 82.43 KB (82432 bytes)
MD5: 0825d6e70acfbe209dfc79fe0278edfa
Detection count: 84
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 4, 2014

e6b3574875564ccf177f3550185ba7466808b25120dfdd5e661145c4bf2534a3.exe

File name: e6b3574875564ccf177f3550185ba7466808b25120dfdd5e661145c4bf2534a3.exe
Size: 82.94 KB (82944 bytes)
MD5: 35520a42bd81730f7d2d497324b45ca1
Detection count: 83
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 4, 2014

e296f023f0155ff870c76e7e646c64e4f37b7a324dbbc370d3aef2d258e18e07.exe

File name: e296f023f0155ff870c76e7e646c64e4f37b7a324dbbc370d3aef2d258e18e07.exe
Size: 82.94 KB (82944 bytes)
MD5: 4e4ce4a8e68b9e6ae4fa823ed8e330b6
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 4, 2014

cf50de9f0d30d4fbffcf30865a054bd153cc8f9c394b66bccb4cb6a1ef712ada.exe

File name: cf50de9f0d30d4fbffcf30865a054bd153cc8f9c394b66bccb4cb6a1ef712ada.exe
Size: 82.94 KB (82944 bytes)
MD5: 585d6eb842385840ea332cf62ff1adc3
Detection count: 81
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 4, 2014

888bb2f01d52ab5a1eada119ab8d68316ab8dbc2bf97b8f22cfdbc023f1443fa.exe

File name: 888bb2f01d52ab5a1eada119ab8d68316ab8dbc2bf97b8f22cfdbc023f1443fa.exe
Size: 82.43 KB (82432 bytes)
MD5: 759d125106bd4c4b1b438f8a24fa1e45
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 4, 2014

4afa8b782bf3bfd6b72985538e369708244bacf03a5c35b5f2ca60ce2c45c037.exe

File name: 4afa8b782bf3bfd6b72985538e369708244bacf03a5c35b5f2ca60ce2c45c037.exe
Size: 82.94 KB (82944 bytes)
MD5: 55fd4f673d7c1cd098b1444187cc1a21
Detection count: 76
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 4, 2014

42f7d9efed3d944fe1671034cc60673ea9e14d03f7e59ca8aa68ae0dc15c5d3f.exe

File name: 42f7d9efed3d944fe1671034cc60673ea9e14d03f7e59ca8aa68ae0dc15c5d3f.exe
Size: 82.43 KB (82432 bytes)
MD5: fab108e9fcdc8c26f00380772b6e4fa6
Detection count: 75
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 4, 2014

339e1ca336b0cf97e0b94218d58c8304287bd932439f7e7dcf6d42febc79b8fa.exe

File name: 339e1ca336b0cf97e0b94218d58c8304287bd932439f7e7dcf6d42febc79b8fa.exe
Size: 82.43 KB (82432 bytes)
MD5: 62417af4ee2bdbd5c9c8955b7dedebc2
Detection count: 74
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 4, 2014

16dac8c82038918c46592900157fdb8c8cc7d5a0085c545ac72f6a96f1f45f2c.exe

File name: 16dac8c82038918c46592900157fdb8c8cc7d5a0085c545ac72f6a96f1f45f2c.exe
Size: 82.43 KB (82432 bytes)
MD5: 5aaa58a91b90cfa93a4ca599ae4b9829
Detection count: 73
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 4, 2014

00f4bfab95685556e658bb5812900686f0837c285fee502860b8a03d2897a9f2.exe

File name: 00f4bfab95685556e658bb5812900686f0837c285fee502860b8a03d2897a9f2.exe
Size: 82.43 KB (82432 bytes)
MD5: e3d6e4af9bdb2bd2baf9b7b76fb88f7a
Detection count: 72
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 4, 2014

%SystemDrive%\Users\<username>\AppData\Local\5cji4z.exe

File name: 5cji4z.exe
Size: 82.43 KB (82432 bytes)
MD5: 922a92c0737e65ff3b03891cff50c37a
Detection count: 70
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Local
Group: Malware file
Last Updated: December 4, 2014

%LOCALAPPDATA%\7k5mp.exe

File name: 7k5mp.exe
Size: 82.43 KB (82432 bytes)
MD5: d1cf5bbf6c71aff081d89bcaae1248a9
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%
Group: Malware file
Last Updated: December 4, 2014

%LOCALAPPDATA%\cfwdufiv.exe

File name: cfwdufiv.exe
Size: 82.43 KB (82432 bytes)
MD5: 062f6ea128d113a9e52e8c072d4884a0
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%
Group: Malware file
Last Updated: December 4, 2014

%LOCALAPPDATA%\aauqobnb.exe

File name: aauqobnb.exe
Size: 82.43 KB (82432 bytes)
MD5: 48ba1563cbe0aa437a61844153d11c87
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%
Group: Malware file
Last Updated: December 4, 2014

%WINDIR%\Installer\{1BAB6219-5EBA-42B7-97CF-33CFB6224837}\msiexec.exe

File name: msiexec.exe
Size: 82.43 KB (82432 bytes)
MD5: be4fe5f94ee3e537bd364c1fe37cbfb8
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\Installer\{1BAB6219-5EBA-42B7-97CF-33CFB6224837}
Group: Malware file
Last Updated: December 4, 2014

%LOCALAPPDATA%\bwhviujc.exe

File name: bwhviujc.exe
Size: 82.43 KB (82432 bytes)
MD5: 34009b0cc5d10ded9f7c02ffbe03e6ce
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%
Group: Malware file
Last Updated: December 4, 2014

%LOCALAPPDATA%\ioundltt.exe

File name: ioundltt.exe
Size: 82.94 KB (82944 bytes)
MD5: c209a9ca6f2943aa4554cdea599219ad
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%
Group: Malware file
Last Updated: December 4, 2014

%LOCALAPPDATA%\qx98w2d30d.exe

File name: qx98w2d30d.exe
Size: 82.43 KB (82432 bytes)
MD5: 90e109518c30037dff61d9c41ce1b7a4
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%
Group: Malware file
Last Updated: December 4, 2014

%LOCALAPPDATA%\ac0mb4mzg.exe

File name: ac0mb4mzg.exe
Size: 82.43 KB (82432 bytes)
MD5: a9341756e9e1f98c30f56d3802827b41
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%
Group: Malware file
Last Updated: December 4, 2014

xpantivirus2014.exe

File name: xpantivirus2014.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file