XP Antispyware 2015 Virus Removal Guide

XP Antispyware 2015 is a new fake computer antispyware application. The application was released around early June 2016 and has spread to computers through the drive by download type infection. When browsing websites, XP Antispyware 2015 is generally downloaded without user permission and installed on the computer through a security flaw in the browser or in software used by the browser. Programs like XP Antispyware 2015 like this mode of infection since it can easily spread to many computers. This type of application is classified as a Rogue Security Application. While XP Antispyware 2015 may look like a real antivirus program, the program is fake. The program will not provide any of the features it claims to have. XP Antispyware 2015 is one of many new fake applications; these fake antivirus programs are a large family of fake antivirus programs which are similar in functionality and look. This group of fake antivirus applications have been around since February 2016. The previous version of XP Antispyware 2015 was XP Anti-Spyware 2016, which has a similar look and was released in November 2016. The newer look makes the program look more professional.

The main executable for XP Antispyware 2015 generally hides in the computer as a hidden system protected file. The user will need to turn on features to see the main executable for XP Antispyware 2015. This executable is similar to AV.exe and AVE.exe, which are the main executable of previous clones of this virus. XP Antispyware 2015 will modify the registry; therefore, the registry must be fixed before removing the main executable file. The comments for AV.exe and comments for AVE.exe may provide insight into the successful removal of XP Antispyware 2015. These two pages have roughly a combined 160 comments. It is important to read through these comments to gain insight into the removal of XP Antispyware 2015.

Below is our recommended removal tool for XP Antispyware 2015. The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

XP Antispyware 2015 will block the user from browsing the web. To download the removal tool, please type in the address below in Internet Explorer.

http://www.virusremovalguru.com/download.php

It is still possible to use Internet Explorer. In the video below, we have detailed how to access the web in Internet Explorer. This process was performed with a previous version of XP Antispyware 2015.

We recommend reading through our removal tips which will help to remove XP Antispyware 2015. Fake applications like XP Antispyware 2015 have many similar features and generally have a similar method removal. Therefore, we have created the removal tips to help. XP Antispyware 2015, like many other fake antivirus programs, will create a series of warnings and pop ups in order to scare the user into purchasing the fake program. Some of these warnings which are created by XP Antispyware 2015 can be found below.

“XP Antispyware 2015 Firewall Alert!
XP Antispyware 2015 has blocked a program from accessing the internet.
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen. Private data can be stolen by third parties, including credit card details and passwords.”

“Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.”

XP Antispyware 2015 will also modify Internet Explorer to show the following alert listed below when the browser is opened. It will continue to show the following when visiting websites. It will essentially redirect the webpage to the following.

“Internet Explorer alert. Visiting this site may pose a security threat to your system!

Possible reasons include:

Dangerous code found in this site’s pages which installs unwanted software into your system.
Suspicious and potentially unsafe network activity detected.
Spyware infection in your system.
Complaints from other users about this site.
Port and system scans performed by the site being visited.

Things you can do:

Get a copy of XP Antispyware 2015 to safeguard your PC while surfing the web (RECOMMENDED).
Run a spyware, virus and malware scan.
Continue surfing without any security measures (DANGEROUS).”

It is recommended to use safe mode when removing the virus because XP Antispyware 2015 will generally not be able to load in safe mode. To enter safe mode, restart the computer and press F8 multiple times before the Windows screen to bring up the boot options.

Boot Menu

The safe mode with networking option will allow the user to be able to use the internet in safe mode. XP Antispyware 2015 can be removed by using the

or by manually removing the virus.

View XP Antispyware 2015 Files
View XP Antispyware 2015 Keys

Manual XP Antispyware 2015 Removal – In order to manually remove XP Antispyware 2015, the processes associated with XP Antispyware 2015 must be stopped, the files associated with the processes must be removed, and the registry entries must be corrected to the previous state before XP Antispyware 2015 entered the computer.

Stop XP Antispyware 2015 Processes (Learn How To Do This)
[random letters].exe

The executable for XP Antispyware 2015 will generally be a series of three characters or PW.exe.

Remove XP Antispyware 2015 Files (Learn How To Do This)
C:\Documents and Settings\[username]\Local Settings\Application Data\[random letters].exe

XP Antispyware 2015 main executable file is a hidden protected system file. Turn on “show hidden files” and turn off “hide protected operating system files” in order to see these files. This feature can be found in the folder options in the view tab.

Remove XP Antispyware 2015 Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER\Software\XP Antispyware 2015
HKEY_LOCAL_MACHINE\SOFTWARE\XP Antispyware 2015
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XP Antispyware 2015

Remove XP Antispyware 2015 Startup Entry (Learn How To Do This)
[random letters].exe

Your feedback is very highly valued by others so please feel free to comment below. Please feel free to share a solution that you may have used to remove XP Antispyware 2015.

This entry was posted on Thursday, June 9th, 2016 at 3:07 pm and is filed under Malware Removal. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.

One Response to “XP Antispyware 2015 Virus Removal Guide”

Scott June 18th, 2016 at 6:01 am

Thanks for posting the steps. I’m trying to confirm I’m uninfected, but I wouldn’t have gotten as far as I did without your help. Additional comments: After removing the running malware process (nho.exe), I was able to bring up msconfig…it took 2 tries. Then attempting to save the msconfig changes I believe took 2 tries. You might want to suggest users check for usable restore points versus editing the registry. I think I had to resort to system restore because at least for me in safe mode, my system did not recognize any commands (eg, start->run->regedit.exe). My xp machine fortunately had made an automatic restore point a few hours prior to my infection. Once again thanks.

Leave a Reply