XP Anti-Virus 2016 (XPAntiVirus2011) Virus Removal Guide

Virus Type: Rogue Security Application
Threat Level: 8 / 10

XP Anti-Virus 2016 is a new fake antivirus application. XP Anti-Virus 2016 has been programmed to change the name of the program from operating system to operating system. For example, XP Anti-Virus 2016 generally infects systems running Windows XP. The virus will change into Vista Anti-Virus 2016 if it infects a computer running Windows Vista; the virus will change into Win7 Home Security 2016 if it infects a computer running Windows 7. While this specific virus is new, Anti-Virus 2016 is a clone of a variety of fake antivirus programs and has a similar look to XP Total Security. XP Anti-Virus 2016 main executable is generally a series of three random letters; this executable is similar to AV.exe and AVE.exe, which are the main executable of previous clones of this virus. Before, the executable had a fixed filename; however, the virus has been modified to have the executable filename change from computer to computer possibly to make it harder to find. XP Anti-Virus 2016 will modify the registry; therefore, the registry must be fixed before removing the main executable file. The comments here and comments here may provide insight into the successful removal of XP Anti-Virus 2016. The main executable is generally a hidden file; therefore, it is important that the user turn on hidden files in their file explorer in order to see the hidden main executable file.

Below is our recommended removal tool for XP Anti-Virus 2016. The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

If you are unable to run the removal tool, or are unable to run any programs in general, you may need to stop the processes associated with XP Anti-Virus 2016 with task manager. If task manager has been blocked by XP Anti-Virus 2016, try using Process Explorer.

XP Anti-Virus 2016, like many other fake antivirus programs, will create a series of warnings and pop ups in order to scare the user into purchasing the fake program. Some of these warnings which are created by XP Anti-Virus 2016 can be found below.

“Privacy Threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.”

“XP Anti-Virus 2016 Firewall Alert!
XP Anti-Virus 2016 has blocked a program from accessing the internet.
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen. Private data can be stolen by third parties, including credit card details and passwords.”

“Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.”

“Windows Security Center
XP Anti-Virus 2016 reports that it is currently turned off. A firewall helps to protect your computer from potentially harmful content on the internet. Click Recommendations to learn how to fix this problem.”

XP Anti-Virus 2016 may also modify Internet Explorer to show the following alert listed below when the browser is opened.

Internet Explorer alert. Visiting this site may pose a security threat to your system!

It is recommended to use safe mode when removing the virus because XP Anti-Virus 2016 will generally not be able to load in safe mode. To enter safe mode, restart the computer and press F8 multiple times before the Windows screen to bring up the boot options.

Boot Menu

The safe mode with networking option will allow the user to be able to use the internet in safe mode. XP Anti-Virus 2016 can be removed by using the

or by manually removing the virus.

View XP Anti-Virus 2016 Files
View XP Anti-Virus 2016 Keys

Common symptoms and characteristics of XP Anti-Virus 2016 and other rogue security programs include:
1. XP Anti-Virus 2016 is generally installed without user permission.
2. XP Anti-Virus 2016 uses pop ups and fake virus scans to scare the user.
3. Various antivirus and system programs on the user’s computer will stop functioning.

Manual XP Anti-Virus 2016 Removal – In order to manually remove XP Anti-Virus 2016, the processes associated with XP Anti-Virus 2016 must be stopped, the files associated with the processes must be removed, and the registry entries must be corrected to the previous state before XP Anti-Virus 2016 entered the computer.

Important: Before attempting to manually remove XP Anti-Virus 2016, we recommend that the user read through comments posted by other users on how they removed specific fake antivirus programs since many fake antivirus programs are similar. These comments can be found by clicking here. These comments may provide additional information which may be useful in removing XP Anti-Virus 2016. However, please use discretion since these specific comments pertain to other fake antivirus programs.

XP Anti-Virus 2016 Removal Tip – The comments here for XP Antispyware 2016 and the comments here for Total Vista Security may provide insight into the removal of XP Anti-Virus 2016. XP Anti-Virus 2016, XP Antispyware 2016 (released February 2016), and Total Vista Security (released March 2016) are all part of the same family of fake antivirus programs.

Stop XP Anti-Virus 2016 Processes (Learn How To Do This)
[random letters].exe

Remove XP Anti-Virus 2016 Files (Learn How To Do This)
C:\Documents and Settings\[username]\Local Settings\Application Data\[random letters].exe

The executable is generally a series of three letters. Make sure to turn on hidden files since the executable is generally hidden. The user can turn on hidden files in the folder options.

Remove XP Anti-Virus 2016 Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER\Software\XP Anti-Virus 2016
HKEY_LOCAL_MACHINE\SOFTWARE\XP Anti-Virus 2016
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XP Anti-Virus 2016

Remove XP Anti-Virus 2016 Startup Entry (Learn How To Do This)
[random letters].exe

Common Questions -
1. What is a computer virus? (Click Here To View)
2. How did I get this computer virus? (Click Here To View)
3. What common symptoms show that my computer may be infected? (Click Here To View)
4. What is a rogue security application? (Click Here To View)
5. What are some antivirus and antispyware programs which I can use to remove viruses and spyware? (Click Here To View)

If you have any questions or comments, please don’t hesitate to comment below. If you need any help with any of the steps, please don’t hesitate to comment below. We recommend that you follow our safety tips so that you can keep your computer clean Please Click Here to View Our Safety Tips.

Your feedback is very highly valued by others so please feel free to comment below. Please feel free to share a solution that you may have used to remove XP Anti-Virus 2016.

This entry was posted on Saturday, March 12th, 2017 at 3:15 pm and is filed under Malware Removal. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

3 Responses to “XP Anti-Virus 2016 (XPAntiVirus2011) Virus Removal Guide”

Thomas Bringman March 24th, 2017 at 12:07 am

I’m trying to get rid of this XP Home Security 2016 virus on another machine. In Safe Mode, I don’t find it’s files or registry keys, and it won’t let me open or upload Stopzilla or any other software. It just keeps popping up. I find it in Processes as xft.exe and I end process with it, but it must be hiding real good. Any thoughts as what I can do?

Hannah May 4th, 2016 at 4:40 pm

We’ve had XP Antivirus 2016 infect our laptop, but I can’t remove it through the task manager or registry keys. There are no files like the ones mentioned above.

Gary May 25th, 2016 at 6:39 pm

I just repaired my XP pc that had this virus, I put SuperAntiSpyware on another drive (USB) and ran it in safe mode from there. I also could not find the aformentioned files but the anti virus program did.
Good Luck!

Leave a Reply