XP Security Tool 2010

XP Security Tool 2010 is a rogue anti-spyware program that reports fake security results to scare users into purchasing it. XP Security Tool 2010 uses bogus scan results and security alerts to convince victims that their systems are infected with Trojans, worms, viruses etc. Following the fake security notifications, users will be prompted to purchase the "full version" of XP Security Tool 2010 in order to remove all the "detected" threats. XP Security Tool 2010 is also able to disable certain security applications on an infected PC in order to avoid detection and removal. XP Security Tool 2010 is a useless application that should never be purchased.

File System Details

XP Security Tool 2010 creates the following file(s):
# File Name Detections
1. %AppData%\ave.exe N/A

Registry Details

XP Security Tool 2010 creates the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "secfile"
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = ""%AppData%\ave.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\ave.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"

Trending

Most Viewed

Loading...