How to remove XP Anti-Spyware 2011

Posted by Support @ Whaddya.com On Tuesday, April 19, 2011
I assisted someone to remove the XP Anti-Spyware 2011 today. This is a similar category of Spyware Protect 2009, Vista Antimalware 2011, and Win 7 Antispyware 2011. The malicious codes apply similar approach of scaring user by displaying pop-up that your computer is infected, ask you to activate XP Anti-Spyware software, imitating  anti-virus or anti-spam program to buy. DO NOT BUY anything. A local computer technician can clean this for you.

If you're a system administrator or a local computer technician. Here's a simple procedure I tried and tested to clean up this mess! This manual removal is not applicable to end-users that doesn't understand computer trouble shooting, leave this to the professional. Seek for assistance right away.

End these processes in Task Manager
WavXDocMgr.exe
bhj.exe

Delete this file here:
C:\Documents and Settings\juliad\Local Settings\Application Data
WavXMapDrive.bat
iconfile

Run Regedit and delete these entries:
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'
HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1'

HKEY_CLASSES_ROOT\.exe\DefaultIcon "(Default)" = '%1'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\.exe" /START "%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile "Content Type" = 'application/x-msdownload'
HKEY_CLASSES_ROOT\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\.exe" /START "%1" %*'

I read this manual removal from this website:
http://www.spywarevoid.com/remove-xp-antispyware-2011-xpantispyware-2011-removal.html

They mentioned some registry entries but not applicable to the computer I help removed this virus.

I also shared an article on how to remove Spyware Protect 2009, that was posted here:
http://www.medialogy.com/2009/04/whaddya-know-how-to-remove-spyware_27.html

Join the discussion at www.Blocklist.com community.

Related Posts :



0 Response to "How to remove XP Anti-Spyware 2011"

Post a Comment

First things first: Connect through one of the following social media tools below:
Enter your email address:
Subscribe to KING.NET by Email http://www.twitter.com/kingnet
http://www.randompage.com/profile/king
Moscom.com Web Hosting 24x7 Phone Support. The ultimate in performance, control, and convenience.

Get a Free Bitcoin

NeedName.com - Domain Name Registration and DNS Management.
Breeder.co - All about Pets.
Pet By OWner.
Moscom.com Web Hosting, SSL, Email, DomainName, and Dedicated Server.
For Ad Campaign, please send email to Support[@]Whaddya.com. Thank you.