XP Antivirus 2012

From Wiki-Security, the free encyclopedia of computer security

XP Antivirus 2012 Information
Type: Spyware
Analysis: Installs & gathers info from a PC without user permission.
Infection: By downloading freeware & shareware.
Symptoms: Changes PC settings, excessive popups & slow PC performance.
Detection Tool: >>> Download SpyHunter's Spyware Scanner <<<

SpyHunter's spyware scanner is intended to quickly scan and identify spyware on your PC. If you wish to eliminate spyware from your PC and prevent future spyware attacks, we recommend you buy SpyHunter's spyware removal tool, which includes full technical support and a Spyware HelpDesk to tackle spyware that is uniquely affecting your PC.
IE Alert:

If you are using Internet Explorer and can not download SpyHunter, please use a different browser like Firefox or Chrome.

What is XP Antivirus 2012?

While XP Antivirus 2012 boasts that XP Antivirus 2012 is a trustworthy PC security program that can detect security threats on your PC system, XP Antivirus 2012 is actually one of the types of threats that XP Antivirus 2012 claims to detect and ward off.

The truth is that XP Antivirus 2012 is a dangerous rogue anti-spyware application. Disguising itself as a genuine PC security software application, XP Antivirus 2012 actually employs a harmful Trojan that XP Antivirus 2012 uses to invade and infect unsuspecting users' PC systems, without either their knowledge or approval.

XP Antivirus 2012 is a malicious scareware program and a dangerous rogue security application. If you find that your computer has become infected with XP Antivirus 2012, it is crucial that you remove this threat immediately. Remove XP Antivirus 2012 before XP Antivirus 2012 is it's able to cause irreversible damage on your system.

The XP Antivirus 2012 Family of Rogue Security Applications: Aliases and Alternating Names

Brought to you by the same cyber crooks that created some of the most malicious and dangerous rogue security applications from early 2011, XP Antivirus 2012's creators have devised the program to alter the application's name based on the operating systems of the PCs that XP Antivirus 2012 infects. A few other members of the XP Antivirus 2012 family are Vista Defender Pro, Total Vista Security, Win 7 Security 2011, and nearly fifty others. Except for being slightly more sophisticated and more difficult to remove from compromised systems, XP Antivirus 2012, as well as XP Antivirus 2012's clone-like applications Vista Antivirus 2012 and Win 7 Home Security, is little more than a carbon copy of older models.

XP Antivirus 2012 is able to alter XP Antivirus 2012's executable file name from PC to PC. This means that when this particular rogue security application infects a PC with a Windows 7 operating system, XP Antivirus 2012 will display the name Win 7 Antivirus 2012; but when XP Antivirus 2012 infects a system running Windows Vista, XP Antivirus 2012 will display the name, Vista Antivirus 2012. Again, if an infected system uses the Windows XP OS, XP Antivirus 2012 will display the name, XP Antivirus 2012. The following table displays a few examples of the XP Antivirus 2012 family and their alternating names:

XP AliasesWin 7 AliasesVista Aliases
XP AntivirusWin 7 AntivirusVista Antivirus
XP Anti-virusWin 7 Anti-virusVista Anti-virus
XP Total SecurityWin 7 Total SecurityVista Total Security
XP Home SecurityWin 7 Home SecurityVista Home Security
XP Anti-SpywareWin 7 Anti-SpywareVista Anti-Spyware
XP Internet SecurityWin 7 Internet SecurityVista Internet Security
XP SecurityWin 7 SecurityVista Security

This ability to change XP Antivirus 2012's name from OS to OS, from PC to PC, sets XP Antivirus 2012 apart from other rogue anti-spyware programs. Seemingly, the reason for this capability is that XP Antivirus 2012 adds a further element of supposed legitimacy to this fake security application, by making it seem as if XP Antivirus 2012 is associated with the PC operating system.

XP Antivirus 2012 is a Dangerous Rogue Security Program

With the constantly evolving, parasitic growth-type trend that is currently being employed by malware creators, it is increasingly more and more difficult to spot a look-alike application, and XP Antivirus 2012 is no exception. XP Antivirus 2012 was created and designed to mimic a legitimate PC security program, and is definitively deceptive in XP Antivirus 2012's pretender role.

XP Antivirus 2012 is actually a nasty PC infection that utilizes a harmful Trojan and is a rogue security application that is intent on stealing as much of your hard earned money as XP Antivirus 2012 can.

XP Antivirus 2012 exploits an extensive assortment of scareware-type tactics, to mislead PC users to purchase the 'full version' of XP Antivirus 2012's rogue security application. These tactics often manifest as phony security reports, constant display of annoying pop-up alerts, and spam windows adamantly prompting you to install and/or purchase XP Antivirus 2012. It is imperative to note that the entirety of the XP Antivirus 2012 rogue security application is completely BOGUS. This rogue security program's claims, scans, detections, alerts – as well as anything else that XP Antivirus 2012 might seemingly promise or offer – is completely and absolutely bogus!

A few of the bogus pop-up security alerts that XP Antivirus 2012 may generate are:

Win 7 Anti-Spyware 2012 Firewall Alert
XP Home Security 2012 has blocked a program from accessing the Internet
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.

Malware Intrusion
Sensitive areas of your system were found to be under attack. Spy software attack or virus infection possible. Prevent further damage or your private data will get stolen. Run an anti-spyware scan now. Click here to start.

System danger!
Your system security is in danger. Privacy threats detected. Spyware, keyloggers, or Trojans may be working the background right now. Perform an in-depth scan and removal now, click here.

System Hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.

Privacy threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.

Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.

Win 7 Anti-Spyware 2012 Alert
Security Hole Detected!
A program is trying to exploit Windows security holes! Passwords and sensitive data may be stolen. Do you want to block this attack?

The pop-up alerts and fake security scans that XP Antivirus 2012 employs are used for one, singular purpose. They are meant to bombard you thoroughly with convincing endorsements and advertisements for XP Antivirus 2012, in order to force you to purchase this rogue security software. XP Antivirus 2012 is nothing more than a malicious rogue security application, and as such, XP Antivirus 2012 has the ability to compromise your PC system, by breaching your computer security, in XP Antivirus 2012's attempt to violate your privacy.

Signs and Symptoms of XP Antivirus 2012

XP Antivirus 2012 uses a Trojan to redirect your web searches, change your browser and homepage settings, as well as change your PC desktop settings. This Trojan will also block all other anti-virus or anti-spyware programs that may attempt to run on your computer system. This is so your actual PC security defenses do not have the chance to detect and/or attempt to rid your system of XP Antivirus 2012.

Some other common symptoms that manifest from a rogueware/trojan infection are:

- Installs itself without user knowledge or permission.
- Connects to the Internet without user permission.
- Annoying fake pop-up alerts.
- Installs other types of adware and spyware without user permission.
- A dramatic decrease in overall PC functionality.
- Remains constantly running in the background.

XP Antivirus 2012 will work to infect and corrupt your PC registry. By creating and/or adding new registry values to your system's registry, XP Antivirus 2012 ensures that it is allowed to launch XP Antivirus 2012's rogue security application each and every time Windows launches.

If XP Antivirus 2012 is left to corrupt your PC registry, XP Antivirus 2012 may leave your PC vulnerable, unsafe, and unprotected, and if not treated as soon as possible, XP Antivirus 2012 has the ability to result in a complete collapse of your PC system.

To check your computer for XP Antivirus 2012, download SpyHunter Spyware Detection Tool.

SpyHunter spyware detection tool is only a scanner meant to assist you in detecting XP Antivirus 2012 and other threats. If you detect the presence of XP Antivirus 2012 on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of XP Antivirus 2012.


Detection of XP Antivirus 2012 (Recommended)

XP Antivirus 2012 is difficult to detect and remove. XP Antivirus 2012 is not likely to be removed through a convenient "uninstall" feature. XP Antivirus 2012, as well as other spyware, can re-install itself even after it appears to have been removed.

You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove XP Antivirus 2012 and other spyware, adware, trojans and viruses on your computer.

Run a XP Antivirus 2012 scan/check to successfully detect all XP Antivirus 2012 files with the SpyHunter Spyware Detection Tool. If you wish to remove XP Antivirus 2012, you can either purchase the SpyHunter spyware removal tool to remove XP Antivirus 2012 or follow the XP Antivirus 2012 manual removal method provided in the "Remedies and Prevention" section.

Method of Infection

There are many ways your computer could get infected with XP Antivirus 2012. XP Antivirus 2012 can come bundled with shareware or other downloadable software.

Another method of distributing XP Antivirus 2012 involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing XP Antivirus 2012 on your system. XP Antivirus 2012 installs on your computer through a trojan and may infect your system without your knowledge or consent.

If you think you may already be infected with XP Antivirus 2012, use this SpyHunter Spyware dectection tool to detect XP Antivirus 2012 and other common Spyware infections. After detection of XP Antivirus 2012, the next advised step is to remove XP Antivirus 2012 with the purchase of the SpyHunter Spyware removal tool.


XP Antivirus 2012 may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of XP Antivirus 2012 from your computer.

Remedies and Prevention

XP Antivirus 2012, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. XP Antivirus 2012 along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.

Install a good anti-spyware software

When there's a large number of traces of Spyware, for example XP Antivirus 2012, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect XP Antivirus 2012 and other types of spyware.

Remove XP Antivirus 2012 manually

Another method to remove XP Antivirus 2012 is to manually delete XP Antivirus 2012 files in your system. Detect and remove the following XP Antivirus 2012 files:


  • %AllUsersProfile%\random.exe
  • %AppData%\Local\.exe
  • %AppData%\Local\random.exe
  • %AppData%\Roaming\Microsoft\Windows\Templates\random.exe
  • %Temp%\random.exe
  • %UserProfile%Local SettingsApplication Datapw.exe
  • %UserProfile%Local SettingsApplication DataMSASCui.exe
  • %UserProfile%Local SettingsApplication Datavz.exe
  • %UserProfile%AppDataLocalMSASCui.exe
  • %UserProfile%AppDataLocalpw.exe
  • %UserProfile%AppDataLocalvz.exe

Other Files

  • %UserProfile%Local SettingsApplication DataopRSK
  • %UserProfile%AppDataLocalopRSK

Registry Keys

  • HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'
  • HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
  • HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon "(Default)" = '%1' = '"%UserProfile%\Local Settings\Application Data\.exe" /START "%1" %*'
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = '"%1" %*'
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
  • HKEY_CURRENT_USER\Software\Classes\exefile "(Default)" = 'Application'
  • HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
  • HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1'
  • HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\.exe" /START "%1" %*'
  • HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
  • HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "(Default)" = '"%1" %*'
  • HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "IsolatedCommand" - '"%1" %*'
  • HKEY_CLASSES_ROOT\.exe\DefaultIcon "(Default)" = '%1'
  • HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\.exe" /START "%1" %*'
  • HKEY_CLASSES_ROOT\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
  • HKEY_CLASSES_ROOT\.exe\shell\runas\command "(Default)" = '"%1" %*'
  • HKEY_CLASSES_ROOT\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
  • HKEY_CLASSES_ROOT\exefile "Content Type" = 'application/x-msdownload'
  • HKEY_CLASSES_ROOT\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
  • HKEY_CLASSES_ROOT\exefile\shell\runas\command "IsolatedCommand" = '"%1" %*'
  • HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\.exe" /START "%1" %*'
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"'
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
  • HKEY_LOCAL_MACHINE\SOFTWARE\MicrosoftSecurity Center "FirewallOverride" = "1"
  • HKEY_LOCAL_MACHINE\SOFTWARE\MicrosoftSecurity Center "AntiVirusOverride" = "1"

External links

If you believe your computer is infected with spyware,
Wiki-Security strongly recommends to download SpyHunter's spyware detection tool to check for spyware on your PC.

Disclaimer Information
This website, its content or any portion of this website is NOT affiliated with, connected to, or sponsored by XP Antivirus 2012 or its creators in any way. This website does not advocate the actions or behavior of XP Antivirus 2012 and its creators. Our objective is to provide Internet users with the know-how to detect and remove XP Antivirus 2012 and other Internet threats.

The readers of this article should not mistake, confuse or associate this article to be an advertisement or a promotion of XP Antivirus 2012 in any way. The content provided on this website is intended for educational or informational purposes and is provided "AS IS" with no warranties, and confers no rights.