XP SecurityCenter — is an anti-spware application that is installed by trojan. XPSecurityCenter is a new version of WinReanimator. This antispyware infects computer systems and displays misleading adverts of free download, wares and pron sites, trojans and security holes.
The flase alarm is what “WWWHOOOOOOOOOOOOOOH” scares most pc users and prompts them to pay for a full license of an application to remove the error; whatever you do, do not pay anything, this is a scam! Big one.
What is the risk level: I would give it a 2.89/3 (High)
Symptoms:
Pop up balloon warning messages claiming that your PC is infected.
- Critical System Error
- Your computer is infected
- Flashing icons appear on your system tray/ Big red circle with a White X
Auto/ Software aided removal: Prescription
1. Malwarebytes’ Anti-Malware
or (Best) Scan “full system” after software installation, view results, and remove check items.
2. Regnow
3. Windows system defender (Good to have on your system)
Manual Remove for Geeks:
1. Search and kill: XPSecurityCenter.exe process.
Start –> Run and type: “taskmgr.exe“ click OK to proceed.
OR
CTRL + ALT + DEL (Select Task Manager)
Click on Processes Tab and look for “XPSecurityCenter.exe” and kill the process
2. Remove XPSecurityCenter and it .dlls files
Start –>Run and type “cmd” then click ok to proceed.
Type “regsvr32 /the file name.dll see the picture below.
Files to remove:
htmlayout.dll
install.exe
Microsoft.VC80.CRT
msvcm80.dll
msvcp80.dll
msvcr80.dll
pthreadVC2.dll
unzip32.dll
XPSecurityCenter.dll
3. Remove and modify the Registry Entry below. If you are dow to here you must know how to modify the registry if not here it is:
Start–>Run –> and type “regedit” and you will see the files below
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
-> HKEY_LOCAL_MACHINE<— Expand this and look for the two items below.
HKEY_USERS
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKEY_LOCAL_MACHINE\SOFTWARE\XP_SecurityCenter
And you are done congrats:
XPSecuritycenter Location:
XP SecurityCenter: “”C:\Program Files\XPSecurityCenter\XPSecurityCenter.exe” /hide
