Threat Database Rogue Anti-Virus Program XP Antivirus Plus 2013

XP Antivirus Plus 2013

Threat Scorecard

Ranking: 13,011
Threat Level: 20 % (Normal)
Infected Computers: 155
First Seen: December 5, 2012
Last Seen: August 19, 2023
OS(es) Affected: Windows

XP Antivirus Plus 2013 is a fake security program that targets computers with the Windows XP operating system. This misleading security tool is part of a large-scale family of fraudulent security programs known as FakeRean. XP Antivirus Plus 2013 and its many clones carry out a common tactic that consists in trying to get inexperienced computer users to purchase expensive upgrades for these fake security programs. There are several ways in which XP Antivirus Plus 2013 tries to convince the victim to do this:

  • XP Antivirus Plus 2013 displays numerous fake, alarming error messages and system alerts.
  • XP Antivirus Plus 2013 runs a fake system scan that indicates that the victim's computer is replete with threats.
  • XP Antivirus Plus 2013 deliberately causes problems on the infected computer, such as interfering with legitimate security programs, preventing the victim from accessing files, causing browser redirects and causing the infected computer to become slow, unresponsive and unstable.

Recognizing XP Antivirus Plus 2013 and Other Threats in the Braviax Family

XP Antivirus Plus 2013 is designed to target a specific operating system. When XP Antivirus Plus 2013 is being installed, the victim's operating system is detected and then a variant of this threat that corresponds to the infected computer's operating system is installed. The main difference between each variant is the first part of each program's name which usually corresponds to a specific operating system. XP Antivirus Plus 2013 is installed on computers running Windows XP. Security researchers have also observed variants of XP Antivirus Plus 2013 named Antivirus 2008, Windows Antivirus 2008, Vista Antivirus 2008, Antivirus Pro 2009, AntiSpy Safeguard, ThinkPoint, Spyware Protection 2010, Internet Antivirus 2011, Palladium Pro, XP Anti-Virus 2011, CleanThis, PC Clean Pro, XP Home Security 2012, Windows Clear Problems, XP Security 2012, Antivirus PRO 2015. These rogue antivirus programs infect computers running Windows Vista, Windows 7 and Windows 8 respectively.

Threats in the Braviax family are also known for using broad, generic terms in their names without specifics. Terms like 'anti-spyware', 'security', or 'anti-virus' (or in this case 'antivirus plus') are common. Finally, these fake security programs use a number designating the supposed release year (which in the case of XP Antivirus Plus 2013 is '2013'). Clones of XP Antivirus Plus 2013 have been observed since 2009, meaning that PC security researchers have previously been acquainted with XP Antivirus Plus 2009, 2010, 2011 and 2012. Despite the different years, the differences between each 'version' of these fake security programs are minimal and only cosmetic.

File System Details

XP Antivirus Plus 2013 may create the following file(s):
# File Name Detections
1. %UserProfile%\Start Menu\Programs\XP Antivirus Plus 2013\XP Antivirus Plus 2013.lnk

Registry Details

XP Antivirus Plus 2013 may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "XP Antivirus Plus 2013"

URLs

XP Antivirus Plus 2013 may call the following URLs:

oopukrecku.com

Messages

The following messages associated with XP Antivirus Plus 2013 were found:

A registered copy of XP Antivirus Plus 2013 offers a full range of features to keep your system clean and protected. Check the list of benefits and opportunities here below:
Secure online shopping and banking with our identity protection
Scanning links and web pages to make your web experience safe
Automated updates and improvements
Anti-spam and anti-phishing features
Real time protection and online firewall
Secured social networking, downloads, chats and online services

XP Antivirus Plus 2013 has blocked a program from accessing the internet
Action Center
Review recent messages and resolve problems
Action Center has detected one or more issues for you to review.
Security
Privacy alert!
Rogue malware detected in your system. Data leaks and system damage are possible. Click here for a free security scan and spyware deletion.
Threat detected!
Security alert! Your computer was found to be infected with privacy-threatening software. Private data may get stolen and system damage may be severe. Recover your PC from the infection right now, perform a security scan.
Virus infection!
System security was found to be compromised. Your computer is now infected. Attention, irreversible system changes may occur. Private data may get stolen. Click here now for an instant anti-virus scan.
XP Antivirus Plus 2013 Alert
Internet Connection alert!
Suspicious network activity detected!
Malware infection is possible!
XP Antivirus Plus 2013 Alert
System hacked!
Unknown programs is scanning your system registry right now! Identity theft detected!

Trending

Most Viewed

Loading...