Home Malware Programs Rogue Anti-Virus Programs XP Antivirus Plus 2013

XP Antivirus Plus 2013

Posted: December 5, 2012

Threat Metric

Threat Level: 2/10
Infected PCs: 84
First Seen: December 5, 2012
OS(es) Affected: Windows

XP Antivirus Plus 2013 is a malicious anti-virus application that's often distributed by malicious sites that host Blackhole Exploit Kit-related drive-by-download exploits. Although XP Antivirus Plus 2013 can't remove or even detect real viruses, XP Antivirus Plus 2013 will continue to detect fake infections as long as XP Antivirus Plus 2013 is on your PC – all for the purpose of requesting you to spend money on its valueless registration process. In addition to not having any real security features, XP Antivirus Plus 2013 may endanger your PC with anti-security attacks, such as blocking other programs, and SpywareRemove.com malware researchers consider XP Antivirus Plus 2013 a threat to any Windows PC that's infected by XP Antivirus Plus 2013. Removing XP Antivirus Plus 2013 should take the form of using actual anti-malware programs to delete XP Antivirus Plus 2013 safely, along with any other steps that are necessary to access said software without any hindrance.

XP Antivirus Plus 2013: Dealing with the Next Year's Cyber-Security Problem a Little Earlier than Usual

XP Antivirus Plus 2013's main family (identified as FakeRean) is a large collection of rogue anti-malware products that include variants in appearances, names and secondary attack functions. However, all members of FakeRean attempt to display misleading and inaccurate security information in an attempt to make you buy their registration keys – a common scamware tactic that has no advantage to your actual PC's safety. SpywareRemove.com malware researchers have classified XP Antivirus Plus 2013 as a member of the Multirogue 2013 sub-branch of FakeRean, with examples of XP Antivirus Plus 2013's relatives including Antivirus 2008 Pro, Windows Antivirus 2008, Vista Antivirus 2008, Antivirus XP 2008, PC Clean Pro, Antivirus Pro 2009, AntiSpy Safeguard, ThinkPoint, Spyware Protection 2010, Internet Antivirus 2011, Palladium Pro, XP Anti-Virus 2011, CleanThis, Rogue.Vista Antivirus 2008, XP Home Security 2012, XP Security 2012 and AntiVirus PRO 2015.

XP Antivirus Plus 2013 markets itself as a new anti-virus tool, but only is capable of displaying inaccurate system scans and pop-up alerts. Additionally, SpywareRemove.com malware experts also have traced the following symptoms to XP Antivirus Plus 2013 and related FakeRean-based malware:

  • XP Antivirus Plus 2013 may monitor which programs you use and block applications (such as legitimate security utilities).
  • XP Antivirus Plus 2013 may block websites and redirect your browser to fake error pages.
  • XP Antivirus Plus 2013 may disable basic Windows security features, including the Windows Firewall and various aspects of the Windows Security Center.

Putting Down XP Antivirus Plus 2013's Malicious Additions to Your PC

As is always the case, avoiding XP Antivirus Plus 2013 infections is superior to needing to remove XP Antivirus Plus 2013 from your computer. Given XP Antivirus Plus 2013's typical distribution methods, SpywareRemove.com malware analysts suggest that you keep all of your software updated, avoid suspicious links, disable exploitable browser features like Java and keep anti-malware products available at all times. These safety measures will help you avoid the drive-by-download exploits that hostile sites may use to install XP Antivirus Plus 2013 without your permission.

If you need to delete XP Antivirus Plus 2013, boot your computer in Safe Mode or use other methods to launch Windows without XP Antivirus Plus 2013 also being launched. Then use any anti-malware scanner of your choice to delete XP Antivirus Plus 2013 safely.

Since XP Antivirus Plus 2013's family is being updated on a regular basis, SpywareRemove.com malware research team also recommends that you maintain your anti-malware solutions updated to detect XP Antivirus Plus 2013.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to XP Antivirus Plus 2013 may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%UserProfile%\Desktop\XP Antivirus Plus 2013.lnk File name: %UserProfile%\Desktop\XP Antivirus Plus 2013.lnk
Mime Type: unknown/lnk
Group: Malware file
%UserProfile%\Start Menu\Programs\XP Antivirus Plus 2013\XP Antivirus Plus 2013.lnk File name: %UserProfile%\Start Menu\Programs\XP Antivirus Plus 2013\XP Antivirus Plus 2013.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "XP Antivirus Plus 2013"

Additional Information

The following messages's were detected:
# Message
1A registered copy of XP Antivirus Plus 2013 offers a full range of features to keep your system clean and protected. Check the list of benefits and opportunities here below:
Secure online shopping and banking with our identity protection
Scanning links and web pages to make your web experience safe
Automated updates and improvements
Anti-spam and anti-phishing features
Real time protection and online firewall
Secured social networking, downloads, chats and online services
2Action Center
Review recent messages and resolve problems
Action Center has detected one or more issues for you to review.
Virus protection (Important)
XP Antivirus Plus 2013 reports that it is turned off
Turn on now
Turn off message about virus protection
3Privacy alert!
Rogue malware detected in your system. Data leaks and system damage are possible. Click here for a free security scan and spyware deletion.
4Threat detected!
Security alert! Your computer was found to be infected with privacy-threathening software. Private data may get stolen and system damage may be severe. Recover your PC from the infection right now, perform a security scan.
5Virus infection!
System security was found to be compromised. Your computer is now infected. Attention, irreversible system changes may occur. Private data may get stolen. Click here now for an instant anti-virus scan.
6XP Antivirus Plus 2013 Alert
Internet Connection alert!
Suspicious network activity detected!
Malware infection is possible!
7XP Antivirus Plus 2013 Alert
System hacked!
Unknown programs is scanning your system registry right now! Identity theft detected!
8XP Antivirus Plus 2013 has blocked a program from accessing the internet