XP Antimalware 2010 also know as XP Antimalware is a rogue antispyware program, clone of XP Internet Security 2010, which is also a rogue antispyware. Nothing new here, as before, the rogue distributed through the use of trojans. When the trojan is initialized, it will download and install core component of XP Antimalware 2010 onto your computer without your permission. The same trojan will also configure the fake security program in such a way as to run automatically when you start any program on your computer. Using the method of running, the rogue can block any your programs, including legitimate antivirus and antispyware applications.
When XP Antimalware 2010 is started, it will perform a full scan of your PC. It It will state that your computer is infected with trojans, adware or malware and that you should purchase its “full” version to remove these infections. Important to know, XP Antimalware 2010 only imitates a system scan, the rogue is not able to perform any type of security related functions. It can`t protect your PC, detect malware files and so on.
What is more, to make a more complete illusion that your computer is infected, XP Antimalware 2010 displays numerous false alerts that the security of your computer at risk, or that a file is infected with a dangerous trojan, etc. The rogue will also hijack Internet Explorer and Firefox and display fake warnings when you opening a web site. As the scan results, all these messages and alerts – a fake, so you can safely ignore them
From the above it is obvious that XP Antimalware 2010 is an unwanted guest on your computer. This is a dangerous computer parasite, which should be removed as soon as possible. To remove XP Antimalware 2010, please follow the step by step guidelines below.
Use the following instructions to remove XP Antimalware 2010 (Uninstall instructions)
Step 1. Repair “running of .exe files”.
Method 1
Click Start, Run. Type command and press Enter. Type notepad and press Enter.
Notepad opens. Copy all the text below into Notepad.
Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Classes\.exe]
[-HKEY_CURRENT_USER\Software\Classes\secfile]
[-HKEY_CLASSES_ROOT\secfile]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"
[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"
Save this as fix.reg to your Desktop (remember to select Save as file type: All files in Notepad.)
Double Click fix.reg and click YES for confirm.
Reboot your computer.
Method 2
Click Start, Run. Type command and press Enter. Type notepad and press Enter.
Notepad opens. Copy all the text below into Notepad.
[Version]
Signature="$Chicago$"
Provider=Myantispyware.com
[DefaultInstall]
DelReg=regsec
AddReg=regsec1
[regsec]
HKCU, Software\Classes\.exe
HKCU, Software\Classes\secfile
HKCR, secfile
HKCR, .exe\shell\open\command
[regsec1]
HKCR, exefile\shell\open\command,,,"""%1"" %*"
HKCR, .exe,,,"exefile"
HKCR, .exe,"Content Type",,"application/x-msdownload"
Save this as fix.inf to your Desktop (remember to select Save as file type: All files in Notepad.)
Right click to fix.inf and select Install. Reboot your computer.
Step 2. Remove XP Antimalware 2010 associated malware.
Download MalwareBytes Anti-malware (MBAM). Once downloaded, close all programs and windows on your computer.
Double-click on the icon on your desktop named mbam-setup.exe. This will start the installation of MalwareBytes Anti-malware onto your computer. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to “Update Malwarebytes’ Anti-Malware” and Launch “Malwarebytes’ Anti-Malware”. Then click Finish.
MalwareBytes Anti-malware will now automatically start and you will see a message stating that you should update the program before performing a scan. If an update is found, it will download and install the latest version.
As MalwareBytes Anti-malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main menu. You will see window similar to the one below.
![malwarebytes-antimalware1 malwarebytes-antimalware1](http://www.myantispyware.com/wp-content/uploads/2009/04/malwarebytes-antimalware1-500x377.jpg)
Malwarebytes Anti-Malware Window
On the Scanner tab, make sure the “Perform quick scan” option is selected, then click on the Scan button to start scanning your computer for XP Antimalware 2010 infection. This process can take quite a while,e, so please be patient.
When the scan is finished a message box will appear that it has completed scanning successfully. Click OK. Now click “Show Results”. You will see a list of infected items similar as shown below.
Note: list of infected items may be different than what is shown in the image below.
![mbam mbam](http://www.myantispyware.com/wp-content/uploads/2009/10/mbam-500x379.jpg)
Malwarebytes Anti-malware, list of infected items
Make sure all entries have a checkmark at their far left and click “Remove Selected” button to remove XP Antimalware 2010. MalwareBytes Anti-malware will now remove all of associated XP Antimalware 2010 files and registry keys and add them to the programs’ quarantine. When MalwareBytes Anti-malware has finished removing the infection, a log will open in Notepad and you may be prompted to Restart.
Note 1: if you can not download, install, run or update Malwarebytes Anti-malware, then follow the steps: Malwarebytes won`t install, run or update – How to fix it.
Note 2: if you need help with the instructions, then post your questions in our Spyware Removal forum.
XP Antimalware 2010 creates the following files and folders
%AppData%\ave.exe
XP Antimalware 2010 creates the following registry keys and values
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = “”%AppData%\ave.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = “”%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe | @ = “secfile”
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = “application/x-msdownload”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = “”%AppData%\ave.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = “”%1″ %*”
Tried both methods,got to the end of the second one and pressed Install and up came that it had failed.Any ideas on what I did wrong please?
wow man it didnt work for me i think i got it out but when i turn off my comp. and turn it back on the pop up shit comes up but with out the other shit that messes up your computer screen when you try to do something…
can someone please help me?
Elaine, check twice both scripts and try again.
spo, what shows your PC when your trying the first step above ?
nothing realy happens i did the first step it didnt change anything
when i turn on my computer it shows the warning sign then after the errors for the programs that couldnt open came up(the ones that say send or dont send) i also scaned it with MalwareBytes a few times so idk wats going on every time i have to remove it with the rkill log file so it will go away
The problem I have is i can open firefox and ie, but still cannot connect to any network. Any suggestions on how to fix that?
Tom, you can ping any sites ? What displays IE when you trying open any site ?
THANK YOU. THANK YOU THANK YOU. man you made me a believer. This AntiMalware B-llSh-t gave me a brain anuerysm the past six hours.(just like Brett Michaels). But then you guys came along and fixed this thing like it was nothing. You are the spyware busters! This AntiMalware can kiss my ass. They can burn in hell 5x over. Now I have my laptop back and running. And I have you guys to thank profusely. Thank you. THANK YOU.
Hi.
This virus is giving me no time to copy and paste the text from a document into the notepad! I have tried typing in method 1 & 2 manually but this does not seem to work.
Please help, I’m really beat here!
Barry, if you can`t create fix.inf, then download fix1.zip from here, unzip it. Right click fix.inf and select Install.
Someone please help me. My dad was going to give me his fancy new laptop, and I asked If i could try it out first. And he said sure. And as soon as I got on like minutes later this virus came on. And I went through these instructions, plus another bunch of intructions. I’ve used Malwarebytes, and also Spyware Doctor. And yeah, It works and everything, the virus gets removed. But then I restart my computer and it’s back! It still pops up. And i’ve been trying and trying. I need this fixed before my dad asks for his laptop make or he will littterallly shoot me in the face.
Please contact me at:
emma.toddishAThotmailDOTcom
PLEASE HELP ME. D:
Emma, please ask for help in our Spyware removal forum. I will help you.
Tried method one but get an error message that says the specified file is not a registry script. You can only import binary registry files from within the registry editor. Is this because I’m running in safe mode? It won’t allow me to get into notepad otherwise as it claims the file is infected.
Method 2 does nothing for me either. This malware is relentless!
Chris, check twice your .reg script. Looks like you have skipped the “Windows Registry Editor Version 5.00” line.
cheers mate its worked a treat nice 1 for that
Thanks guys! Think it’s worked fine! x
Thanks so much, extremely user friendly instructions.
Thank you so much – this thing came out of nowhere and was driving me insane. This method worked just perfectly and now my computer is back to normal again. Can’t thank you guys enough for providing me a solution!
Remember to type everything in the section including “Window Registry Editor Verson 5.00”.
It took me about 10 minutes to find my typing errors. As soon as I found them, everything worked again. Thanks so much.
Hi
Thanks for the advice it encouraged me that the problem can be solved. I started with Method 1, but the PC did not want to accept it. The Method 2 worked and the XP Malware screens disappeared (however they later reappeared as soon as the Internet Explorer run). I ran again Method 2 (fix.inf), and the XP screens disappeared again. After this I ran Malwarebytes (freshly downloaded). After 1 hour work it showed no detection of viruses, Trojans, etc. At this stage I purchased the PC Tools Spyware-doctor-antivirus (40 GB pounds). After its installation and scan 5 Trojans were found (3 low and 2 high danger) and deleted. So again thanks for tips!
Vic
IT WORKED. Used the notepad one. Thanks
what a pain in the a__ the XP Antivirus was…they should be strung up….annoying as hell….anyway, thank you very much for your fix as it totally eliminated that bug….thank you!!!
Thank You!!!!! <3
Thank you. It worked. Now going to upgrade my security
It didn’t work in my case!!! I mean because when I open from Google other web pages I’d been redirected to other sites like Gomeo!
Can somebody help me to solve definetely with this fxxng infection!!!?????
diego, start a new topic in our Spyware removal forum. I will help you to remove this malware.
tried both methods in safe mode and nothing. Cannot perform the fixes in normal mode. Virus prevents me from accessing task manager or run. Please help!
OMG thank you so so so so MUCH!!
you’re the bomb man!
Cheers!!
From Indonesia : my PC is healed, thank you so much! 😀