XP Anti-Virus 2017 (XPAntiVirus2011) Virus Removal Guide

Virus Type: Rogue Security Application
Threat Level: 8 / 10

XP Anti-Virus 2017 is a new fake antivirus application. XP Anti-Virus 2017 has been programmed to change the name of the program from operating system to operating system. For example, XP Anti-Virus 2017 generally infects systems running Windows XP. The virus will change into Vista Anti-Virus 2017 if it infects a computer running Windows Vista; the virus will change into Win7 Home Security 2017 if it infects a computer running Windows 7. While this specific virus is new, Anti-Virus 2017 is a clone of a variety of fake antivirus programs and has a similar look to XP Total Security. XP Anti-Virus 2017 main executable is generally a series of three random letters; this executable is similar to AV.exe and AVE.exe, which are the main executable of previous clones of this virus. Before, the executable had a fixed filename; however, the virus has been modified to have the executable filename change from computer to computer possibly to make it harder to find. XP Anti-Virus 2017 will modify the registry; therefore, the registry must be fixed before removing the main executable file. The comments here and comments here may provide insight into the successful removal of XP Anti-Virus 2017. The main executable is generally a hidden file; therefore, it is important that the user turn on hidden files in their file explorer in order to see the hidden main executable file.

Below is our recommended removal tool for XP Anti-Virus 2017. The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

If you are unable to run the removal tool, or are unable to run any programs in general, you may need to stop the processes associated with XP Anti-Virus 2017 with task manager. If task manager has been blocked by XP Anti-Virus 2017, try using Process Explorer.

XP Anti-Virus 2017, like many other fake antivirus programs, will create a series of warnings and pop ups in order to scare the user into purchasing the fake program. Some of these warnings which are created by XP Anti-Virus 2017 can be found below.

“Privacy Threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.”

“XP Anti-Virus 2017 Firewall Alert!
XP Anti-Virus 2017 has blocked a program from accessing the internet.
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen. Private data can be stolen by third parties, including credit card details and passwords.”

“Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.”

“Windows Security Center
XP Anti-Virus 2017 reports that it is currently turned off. A firewall helps to protect your computer from potentially harmful content on the internet. Click Recommendations to learn how to fix this problem.”

XP Anti-Virus 2017 may also modify Internet Explorer to show the following alert listed below when the browser is opened.

Internet Explorer alert. Visiting this site may pose a security threat to your system!

It is recommended to use safe mode when removing the virus because XP Anti-Virus 2017 will generally not be able to load in safe mode. To enter safe mode, restart the computer and press F8 multiple times before the Windows screen to bring up the boot options.

Boot Menu

The safe mode with networking option will allow the user to be able to use the internet in safe mode. XP Anti-Virus 2017 can be removed by using the

or by manually removing the virus.

View XP Anti-Virus 2017 Files
View XP Anti-Virus 2017 Keys

Common symptoms and characteristics of XP Anti-Virus 2017 and other rogue security programs include:
1. XP Anti-Virus 2017 is generally installed without user permission.
2. XP Anti-Virus 2017 uses pop ups and fake virus scans to scare the user.
3. Various antivirus and system programs on the user’s computer will stop functioning.

Manual XP Anti-Virus 2017 Removal – In order to manually remove XP Anti-Virus 2017, the processes associated with XP Anti-Virus 2017 must be stopped, the files associated with the processes must be removed, and the registry entries must be corrected to the previous state before XP Anti-Virus 2017 entered the computer.

Important: Before attempting to manually remove XP Anti-Virus 2017, we recommend that the user read through comments posted by other users on how they removed specific fake antivirus programs since many fake antivirus programs are similar. These comments can be found by clicking here. These comments may provide additional information which may be useful in removing XP Anti-Virus 2017. However, please use discretion since these specific comments pertain to other fake antivirus programs.

XP Anti-Virus 2017 Removal Tip – The comments here for XP Antispyware 2017 and the comments here for Total Vista Security may provide insight into the removal of XP Anti-Virus 2017. XP Anti-Virus 2017, XP Antispyware 2017 (released February 2017), and Total Vista Security (released March 2017) are all part of the same family of fake antivirus programs.

Stop XP Anti-Virus 2017 Processes (Learn How To Do This)
[random letters].exe

Remove XP Anti-Virus 2017 Files (Learn How To Do This)
C:\Documents and Settings\[username]\Local Settings\Application Data\[random letters].exe

The executable is generally a series of three letters. Make sure to turn on hidden files since the executable is generally hidden. The user can turn on hidden files in the folder options.

Remove XP Anti-Virus 2017 Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER\Software\XP Anti-Virus 2017
HKEY_LOCAL_MACHINE\SOFTWARE\XP Anti-Virus 2017
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XP Anti-Virus 2017

Remove XP Anti-Virus 2017 Startup Entry (Learn How To Do This)
[random letters].exe

Common Questions -
1. What is a computer virus? (Click Here To View)
2. How did I get this computer virus? (Click Here To View)
3. What common symptoms show that my computer may be infected? (Click Here To View)
4. What is a rogue security application? (Click Here To View)
5. What are some antivirus and antispyware programs which I can use to remove viruses and spyware? (Click Here To View)

If you have any questions or comments, please don’t hesitate to comment below. If you need any help with any of the steps, please don’t hesitate to comment below. We recommend that you follow our safety tips so that you can keep your computer clean Please Click Here to View Our Safety Tips.

Your feedback is very highly valued by others so please feel free to comment below. Please feel free to share a solution that you may have used to remove XP Anti-Virus 2017.

This entry was posted on Saturday, March 12th, 2017 at 3:15 pm and is filed under Malware Removal. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

3 Responses to “XP Anti-Virus 2017 (XPAntiVirus2011) Virus Removal Guide”

Thomas Bringman March 24th, 2017 at 12:07 am

I’m trying to get rid of this XP Home Security 2017 virus on another machine. In Safe Mode, I don’t find it’s files or registry keys, and it won’t let me open or upload Stopzilla or any other software. It just keeps popping up. I find it in Processes as xft.exe and I end process with it, but it must be hiding real good. Any thoughts as what I can do?

Hannah May 4th, 2017 at 4:40 pm

We’ve had XP Antivirus 2017 infect our laptop, but I can’t remove it through the task manager or registry keys. There are no files like the ones mentioned above.

Gary May 25th, 2017 at 6:39 pm

I just repaired my XP pc that had this virus, I put SuperAntiSpyware on another drive (USB) and ran it in safe mode from there. I also could not find the aformentioned files but the anti virus program did.
Good Luck!

Leave a Reply