XP Anti-Spyware

dixiefly

A relative (on XP)of mine has a problem that has resulted in a program called XP Anti-Spyware taking over her system. It is looking for her to register with it to eliinate the virus/ malware.

Is this a legitimate software & is it associated with Microsoft XP? I will be able to update her anti virus software but this program is preventing her from going online.

Thanks

mp22

Its the problem have a look here http://www.bleepingcomputer.com/virus-removal/remove-win-7-internet-security-2011

dixiefly

Thanks

brianthomas

Can it just be deleted from the programmes list?

obrien.cathal

Hi,

It is definitely not legitimate software so don't enter any credit card details or passwords into the computer until the infection is cleared.

Generally you will need to disable the program and restore some of you system settings to get everything operational again. A number of these programs manage to block your antivirus and web access so you may find it very tough to remove them using your normal antivirus.

If you can download and install software like MalwareBytes on another computer and run it on the infected computer then it may enable you to clear it. This would enable you to access the internet again for your virus updates.

Hope this helps,
Cathal

whatislove

1. delete it's malicious files:
%AllUsersProfile%\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\t3e0ilfioi3684m2nt3ps2b6lru
%UserProfile%\Local Settings\Application Data\<random 3 letters>.exe
%UserProfile%\Templates\t3e0ilfioi3684m2nt3ps2b6lru
%Temp%\t3e0ilfioi3684m2nt3ps2b6lru
2. delete it's malicious registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'
HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon "(Default)" = '%1' = '"%UserProfile%\Local Settings\Application Data\[random].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile "(Default)" = 'Application'
HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1'
make sure you wipe all the malicious stuff of xp anti-spyware

Malinda

http://blog.teesupport.com/how-to-guide-remove-xp-anti-spyware-xp-anti-spyware-2011-removal-guide/
That really helps.