XP SecurityCenter Info & Manual Removal Guide

Do you have XP SecurityCenter?

This “XP SecurityCenter Removal Guide” article will show you how to identify and remove XP SecurityCenter. This guide will be updated as more information is available.

XP SecurityCenter Detection Test

Run SpyHunter’s Spyware Scanner to check for XP SecurityCenter infections on your PC.

XP SecurityCenter Description

XPSecurityCenter is a rogue anti-spyware program which is a clone of other applications such as XPAntivirus, XPSecurityCenter. XPSecurityCenter may be downloaded and installed through a Trojan infection. Usually the Trojan infection that installs XPSecurityCenter comes from a fake video codec or browser security hole. Once XPSecurityCenter is installed it displays popups and system alerts notifying computer users of the detection of an infection. This message is fake and only used to scare you into purchasing the full XPSecurityCenter program. XPSecurityCenter can be very difficult to remove and it is recommended to use a reputable anti-spyware application to remove it immediately.

Parasite Type: Spyware

Important Notice: Enigmasoftware.com is not associated, affiliated, sponsored or owned by the XP SecurityCenter creators. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of XP SecurityCenter. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, XP SecurityCenter from their computer with the help of SpyHunter and/or manual removal instructions provided on this article. This article is provided “as is” and to be used for educational information purposes only.

XP SecurityCenter Method of Automatic Detection

The removal of spyware such as XP SecurityCenter can be a difficult process. If you regularly run a spyware scan with a good spyware remover, you can automatically detect XP SecurityCenter and other Spyware, Adware, Worms, Trojans and Browser Hijackers.

To quickly detect XP SecurityCenter, follow the instructions below:

Download SpyHunter’s Spyware Scanner.
Select “Start Scan” to run a full system XP SecurityCenter scan.
Reboot your computer.
Run another scan to pick up any remaining XP SecurityCenter infections.

** SpyHunter’s Spyware Scanner only allows you to detect XP SecurityCenter and other spyware. In order to remove XP SecurityCenter, we advise you to buy the full-version of SpyHunter. Weekly XP SecurityCenter file updates and technical support are available with SpyHunter’s spyware remover.

XP SecurityCenter Method of Infection

The following XP SecurityCenter actions occur:

The Internet user surfs the Web and visits a questionable website. A large amount of rogue anti-spyware programs like XP SecurityCenter are mostly pushed through adult websites.
The Internet user downloads a free video codec, such as Video ActiveX Enhancement 2.07, which comes bundled with XP SecurityCenter. Freeware or shareware programs tend to come with other unwanted programs such as XP SecurityCenter. Do not install any free software without reading its EULA. By simply reading a program’s EULA, you can determine whether a program you are installing has spyware bundled with it.
The Internet user is infected with the rogue anti-spyware program XP SecurityCenter. XP SecurityCenter runs a scan on the computer and gives a false spyware report claiming that the computer is infected with spyware. Once the scan is completed, a warning message appears that lists the spyware ‘found’ and the user has to either click on a link or a button to remove it. This deceptive tactic is an attempt to scare the Internet user into clicking on the link or button to purchase XP SecurityCenter.
The Internet user closes all the fake Windows error messages and warnings and is unaware that XP SecurityCenter is still running its malicious tasks in the background. XP SecurityCenter reloads itself on a timer so if the Internet user closes the program it will only take a few moments until it opens again. The average Internet user does not realize when spyware has infected his/her computer until it is too late and the spyware problem has already spread throughout the computer.
Internet user opens web browser and is redirected to a rogue website. Known rogue websites that promote rogue anti-spyware programs are iesecurepages.com, ahomepcsafety.com, securitypills.com, softhomepage.com, asafetyliner.com, puresafetyhere.com, safehomesite.com, instantsafepage.com, safetyonlinepage.com, among others. The Internet user is bombard with websites that pop up messages that tries to push a product on him/her. Ignore such messages! We recommend closing these windows by clicking on the X instead of the ‘OK’ button.

XP SecurityCenter Symptoms

The following XP SecurityCenter symptoms occur:

XP SecurityCenter displays a fake system alert similar to a Windows notification message.
A red or green flashing icon appears in your system tray. If you click on the icon, a fake system alert pops up and directs you to a rogue website similar to safetyuptodate.com. In some cases, even when you don’t click on the icon the fake system alert may still pop up.
The fake system alert promises to give you a legitimate anti-spyware program that will help you fix spyware problems, but instead it really reports false information to try to trick you into purchasing the program.
XP SecurityCenter hijacks or modifies your homepage and displays new desktop shortcuts.
XP SecurityCenter changes your default homepage to a different homepage and creates new unnecessary shortcuts on your desktop. Sometimes XP SecurityCenter won’t even allow you to change it back to your original homepage. A website you may be redirected to is XP SecurityCenter.com or other rogue websites that promote XP SecurityCenter.
XP SecurityCenter installs a rogue toolbar called Security Toolbar 7.1.
Security toolbar 7.1 is a rogue toolbar that comes with two green bars, one that says “block adware” and the other “remove spyware”. If you click on either of them you’re directed to a rogue anti-spyware site which can install additional malware.
XP SecurityCenter bombards your PC with fake Windows warnings messages.
Even after you’ve closed all the XP SecurityCenter messages or your PC has been idle for awhile, you’ll still get constant alert popups appearing on your system tray or on your screen.

XP SecurityCenter Anatomy

As new XP SecurityCenter spyware components are reported by our customers and our Spyware Threat Research Labs, we will update this section.

XP SecurityCenter Manual Removal Instructions

Use Caution! Please read the instructions below carefully. Manual removal of XP SecurityCenter is a delicate procedure. Proceed at your own risk. We advise you to backup your system before you manually remove XP SecurityCenter.

If you are still having problems with XP SecurityCenter after completing these instructions, we recommend you download SpyHunter’s Spyware Detection Tool to safely remove XP SecurityCenter.

To manually remove XP SecurityCenter, follow these removal steps:

Step 1: How to Kill XP SecurityCenter files using Process Explorer.

1a. How to Kill XP SecurityCenter Processes.
1. Download and install Process Explorer.
2. Open Process Explorer.
3. Locate the XP SecurityCenter processes listed below.
4. To kill an XP SecurityCenter process, right-click the XP SecurityCenter process and choose the option “Kill Process Tree”.
5. Kill the following XP SecurityCenter processes:
  XPSecurityCenter.exe

1b. How to Kill XP SecurityCenter DLL files.
1. Right-click the Explorer.exe process and choose the option “Properties”.
2. Click on the “Threads” Tab, locate and highlight the XP SecurityCenter DLL files listed below.
3. To kill XP SecurityCenter DLL files, click the “Kill” button.
4. Kill the following XP SecurityCenter DLL files:
  PowerVideo.dll
  sysdivx.dll
  alisj.dll
  VideoMP3.dll
  windivx.dll
  mp3avi.dll
  XunLeiBHO_Now.dll

Step 2: How to Delete XP SecurityCenter Registry Keys and Values.

Right-click on your Desktop > select “New” option > select “Text Document” (.txt file) option.
Rename the .txt file as a .reg file and call it “Delete_Registry_
XP SecurityCenter_Entities.reg”. This renamed .reg file is a command that creates a shortcut to your Windows registry and allows you to easily delete registry values.
Right-click and select the “Edit” option.
Copy and paste the XP SecurityCenter keys listed below.
In the menu bar, go to “File” > select “Save” > then click the “X” button to close the file.
Double-click on the .reg file.
When the message box appears saying “Are you sure you want to add the information in C:DOCUME~1%username%DesktopDELETE~1.REG to the registry?”, click the “Yes” button.
When the message box appears saying “Information in C:DOCUME~1
%username%DesktopDELETE~1.REG has been successfully entered into the registry.”, click the “OK” button.
The XP SecurityCenter registry keys have been deleted from your registry.

Copy and paste the following XP SecurityCenter keys:

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\XP_SecurityCenter]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\XP_SecurityCenter]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\XP_SecurityCenter]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\XP_SecurityCenter]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\XP_SecurityCenter]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\XP_SecurityCenter]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\XP_SecurityCenter]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\XP_SecurityCenter]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\XP_SecurityCenter]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\XP_SecurityCenter]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\XP_SecurityCenter]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\XP_SecurityCenter]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\XP_SecurityCenter]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\XPSecurityCenter.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\XPSecurityCenter.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XPSecurityCenter.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\XPSecurityCenter.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\XPSecurityCenter.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\XPSecurityCenter.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\XPSecurityCenter.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\XPSecurityCenter.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\XPSecurityCenter.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\XPSecurityCenter.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\XPSecurityCenter.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\XPSecurityCenter.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\XPSecurityCenter.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\XPSecurityCenter.exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\XPSecurityCenter.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\XPSecurityCenter.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\XPSecurityCenter.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\XPSecurityCenter.exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\XPSecurityCenter.exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\XPSecurityCenter.exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\XPSecurityCenter.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\XP SecurityCenter]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\XP SecurityCenter]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\XP SecurityCenter]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\XP SecurityCenter]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\XP SecurityCenter]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\XP SecurityCenter]

Step 3: How to Delete XP SecurityCenter Directories.
1. To locate XP SecurityCenter directories, go to “Start” > “My Computer” > “Local Disk (C:)” > “Program Files” > “Show the contents of this folder”.
2. Search and delete the XP SecurityCenter directories listed below.
3. Right-click on the XP SecurityCenter folder and select “Delete”. option.
4. When the message box appears saying “Are you sure you want to remove the folder [FOLDERNAME] and move all its contents to the Recycle Bin?”, click the “Yes” button.
5. When the message box appears saying “Renaming, moving or deleting [FOLDERNAME] could make some programs not work. Are you sure you want to do this?”, click the “Yes” button.
6. Search and delete the following XP SecurityCenter directories:
  %ProgramFiles%\XPSecurityCenter

Step 4: How to Restore Original Default Home Page.
1. Go to “Start” > “Control Panel” > “Internet Options”.
2. Click on the General Tab > click the Use Default button under Home Page.
3. Click “Apply” and then click the “OK” button.
4. Open a Web browser to verify that your default homepage has been restored.

Step 5: How to Remove the XP SecurityCenter Icons.
1. If the XP SecurityCenter icons still remain on your Desktop, you can drag and drop them to the “Recycle Bin”.
2. Reboot your computer to make sure all changes made for the removal of XP SecurityCenter are complete. If your computer still has issues, you should scan your computer for XP SecurityCenter with a spyware scanner.

Submit XP SecurityCenter To Our Spyware Threat Research Labs

Since XP SecurityCenter spyware components change constantly, you may come across application issues that prevent you from removing XP SecurityCenter completely.

You can report XP SecurityCenter spyware components by using SpyHunter’s Free Support Log System. Our Support Log System takes snapshots of all the points of execution on your operating system, allowing us to precisely identify each and any problem.

We encourage you to post your Support Logs on this article so we can help you come up with a custom fix.

Below are the instructions on how to generate Support Logs using SpyHunter.

Open SpyHunter > click on the “Generate Support Log” button > click on the “Copy to Clipboard” button to save your Support Logs > Post your Support Logs to this article.

Disclaimer

Warning!! Enigma Software Group can not be held responsible for any problems that may occur by using the information contained within this XP SecurityCenter removal guide. By following any of these XP SecurityCenter removal instructions, you agree to be bound by the disclaimer. If you do not agree, do not follow these XP SecurityCenter removal instructions. We make no guarantees that these XP SecurityCenter removal instructions will completely remove XP SecurityCenter. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means. In order to effectively clean and secure your computer, we recommend you purchase our spyware remover SpyHunter or seek professional help from a computer expert.

This entry was posted by Grace Mathews on Saturday, June 21st, 2008 at 8:21 pm and is filed under Spyware Alerts. You can follow any responses to this entry through the RSS 2.0 feed. Responses are currently closed, but you can trackback from your own site.

Comments are closed.