XP Antivirus Pro 2013

ScreenshotThere has been a large number of reports of widespread infections involving updated variants of the or Braviax family of malware. XP Antivirus Pro 2013 is one of the many names that are being used by these fake security programs to scam unsuspecting computer users. As is common with these kinds of fake security programs, there are numerous clones of XP Antivirus Pro 2013. All of these fake security programs use a similar pattern for determining each fake security application's name. The first word is usually the targeted operating system (in this case it is XP since the targeted operating system is Windows XP). It is followed by a generic term that makes it seem as if the program is a security application such as antimalware, home security, antivirus, internet security, etc. Finally, these programs will have the current year tacked on to the end of the rogue security application's name. The newest variants in this family of malware, including XP Antivirus Pro 2013, use the year '2013.' However, apart from its denomination, there is no dissimilarity between XP Antivirus Pro 2013 and previous versions such as

XP Antivirus Pro 2013 and its clones attack particular Windows versions. Although the Trojan that installs XP Antivirus Pro 2013 attacks a variety of computers, each fake security program's name varies depending on the infected computer's operating system. XP Antivirus Pro 2013 is only installed on computers running Windows XP. If the targeted computer is using another version of Windows, such as Windows 7, Windows 8 or Vista, then a program named Win 7 Antivirus Pro 2013, Win 8 Antivirus Pro 2013 or Vista Antivirus Pro 2013 would be installed instead.

XP Antivirus Pro 2013 is designed to make its victims be convinced that their machine is infested with malware. This fake security program harasses its victims with numerous fake error messages and system alerts. When the victim attempts to fix these supposed problems with XP Antivirus Pro 2013, this fake security program displays error messages urging the victim to pay for a fake upgrade for XP Antivirus Pro 2013. Since XP Antivirus Pro 2013 isn't capable of detecting or removing malware and is part of a malware attack itself, ESG security researchers recommend its complete removal using a strong anti-malware program that is fully up to date.

Infected with XP Antivirus Pro 2013? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect XP Antivirus Pro 2013

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Screenshots & Other Imagery

ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

File System Details

XP Antivirus Pro 2013 creates the following file(s):
# File Name
1 %CommonApplData%\[RANDOM CHARACTERS_2]
2 %LocalAppData%\[RANDOM CHARACTERS_2]
3 %Temp%\[RANDOM CHARACTERS_2]
4 %UserProfile%\Templates\[RANDOM CHARACTERS_2]

Registry Details

XP Antivirus Pro 2013 creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\ [RANDOM CHARACTERS_0]
HKEY_CURRENT_USER\Software\Classes\.exe\Content Type application/x-msdownload
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon\ %1
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\ "[RANDOM CHARACTERS_1].exe" -a "%1" %*
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\IsolatedCommand "%1" %*
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\ "%1" %*
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\IsolatedCommand "%1" %*
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\Content Type application/x-msdownload
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\DefaultIcon\ %1
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\open
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\open\command
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\open\command\ "[RANDOM CHARACTERS_1].exe" -a "%1" %*
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\open\command\IsolatedCommand "%1" %*
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\runas
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\runas\command\ "%1" %*
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\runas\command\IsolatedCommand "%1" %*
HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0_0]\ Application

More Details on XP Antivirus Pro 2013

The following messages associated with XP Antivirus Pro 2013 were found:
Severe system damage!
Spyware and viruses detected in the background. Sensitive system components under attack! Data loss, identity theft and system corruption are possible. Act now, click here for a free security scan.
System danger!
Your system security is in danger. Privacy threats detected. Spyware, keyloggers or Trojans may be working in the background right now. Perform an in-depth scan and removal now, click here.
Virus intrusion!
Your computer security is at risk. Spyware, worms and Trojans were detected in the background. Prevent data corruption and credit card information theft. Safeguard your system and perform a free security scan now.
XP Antivirus Pro 2013 Firewall Alert
XP Antivirus Pro 2013 has blocked a program from accessing the internet
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 15 + 15 ?