XP System Repair

By Domesticus in Rogue Anti-Spyware Program

XP System Repair is a fake security program with a unique feature. XP System Repair has come under the attention of malware researchers from around the world because of its ability to change names and skins according to the operating system XP System Repair is attacking; therefore, the name "XP System Repair" corresponding to Windows XP skin only applies when this rogue is attacking a computer with the Windows XP operating system. When infecting a computer running Windows Vista or Windows 7, this same rogue could be named Windows Vista System Repair or Win 7 System Repair with its corresponding skin to match the affected operating system. Other known clones of this rogue security program include Windows 7 Home System Repair, Windows 7 Total Security, XP Home System Repair, Vista Home System Repair, XP Total Security, Vista Total Security, and many others. All of these rogue security programs operate in a similar way: they invade a computer system, deliberately provoke a number of problems, show fake system scans and error messages to make the computer user panic, and then try to get the computer user's credit card information to fix the supposed problems. Don't fall for it, XP System Repair is part of a scam to get your money.
 

Trojans Associated with XP System Repair

There are a number of Trojans associated with XP System Repair. To enter a computer system, XP System Repair may be delivered by the Zlob Trojan or the Fake Microsoft Security Essentials Alert Trojan. In both of these cases, the Trojan will display a fake error message claiming to have found a Trojan infection on the computer, usually the Unknown Win32/Trojan, and then prompt the computer user to download XP System Repair to fix the problem. ESG security researchers strongly recommend that you take the following measures to avoid a Trojan infection:

  1. Avoid high-risk websites. These include pornographic picture or video galleries, file sharing networks, pirated software sites, and websites with poorly supervised advertisements. If you must visit these kinds of websites, you should disable JavaScript and Flash to avoid harmful scripts and exploits.
  2. Use an anti-malware scanner from a reputable source. You should keep an anti-malware program running at all times, especially while browsing the Internet. Also, keep your Internet browser's security settings at their highest levels.
  3. Avoid downloading application or system updates from third-party websites, video codecs from adult video websites, or compressed popular files on file sharing networks. You should also avoid clicking unknown links, downloading files from unknown sources, or opening email attachments from unknown senders.

What to Do When Your Computer is Infected with XP System Repair?

While it is possible remove XP System Repair manually, ESG malware researchers don't recommend that you do this, unless there is no other choice. The best way to remove XP System Repair is to use a legitimate anti-malware tool for automatic removal. If XP System Repair is preventing you from opening your anti-malware tool, rebooting in Safe Mode will prevent XP System Repair from loading and affecting your computer.

File System Details

XP System Repair may create the following file(s):
# File Name Detections
1. %AllUsersProfile%\Application Data\[RANDOM CHARACTERS].dll
2. %AllUsersProfile%\Application Data\[RANDOM CHARACTERS].exe

Registry Details

XP System Repair may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s's:/ogn:/uyu:/dyd:/c'u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/'wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v'w:/rbs:'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'

Messages

The following messages associated with XP System Repair were found:

32% of HDD space is unreadable
Bad sectors on hard drive or damaged file allocation table.
Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.
Critical Error
Hard Drive not found. Missing hard drive.
Critical Error
RAM memory usage is critically high. RAM memory failure.
Critical Error
Windows can't find hard disk space. Hard drive error.
Critical Error!
Damaged hard drive clusters detected. Private data is at risk.
Critical Error!
Windows was unable to save all the data for the file \System32\496A8300. The data has been lost. This error may be caused by a failure of your computer hardware.
Data Safety Problem. System integrity is at risk.
GPU RAM temperature is critically high. Urgent RAM memory optimization is required.
Hard drive doesn't respond to system commands.
Low Disk Space
You are running very low disk space on Local Disk (C:).
Ram Temperature is 83 C. Optimization is required for normal operation.
Read time of hard drive clusters less than 500 ms.
Requested registry access is not allowed. Registry defragmentation required.
System Restore
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.
Windows - No Disk
Exception Processing Message 0x0000013

Related Posts

Trending

Most Viewed

Loading...