XP Security 2015 Virus Removal Guide

XP Security 2015 is a new fake computer security application. The application is one of many fake computer security applications released around early June 2016. The other applications include XP Internet Security 2015 and XP Antivirus 2015. All of these applications have the same look but have a different name. When browsing websites, XP Security 2015 is generally downloaded without user permission and installed on the computer through a security flaw in the browser or in software used by the browser. The best method to avoid this type of infection is to make sure software is up to date. This type of application is classified as a Rogue Security Application. While XP Security 2015 may look like a real antivirus program, the program is fake. We know that it is fake since it has been around in a similar version in November 2016 with the name XP Security 2016. The main different is that the newer program has a more professional look.

The main executable for XP Security 2015 generally hides in the computer as a hidden system protected file. The user will need to change the file viewing settings in order to see the main executable for XP Security 2015. This executable is similar to AV.exe and AVE.exe, which are the main executable of previous clones of this virus. XP Security 2015 will modify the registry; therefore, the registry must be fixed before removing the main executable file. The comments for AV.exe and comments for AVE.exe may provide insight into the successful removal of XP Security 2015. These two pages have roughly a combined 160 comments.

Below is our recommended removal tool for XP Security 2015. The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

XP Security 2015 will block the user from browsing the web. To download the removal tool, please type in the address below in Internet Explorer.

http://www.virusremovalguru.com/download.php

It is still possible to use Internet Explorer. In the video below, we have detailed how to access the web in Internet Explorer.

We recommend reading through our removal tips which will help to remove XP Security 2015 if you plan to manually remove it. The tips have been gathered by doing analysis from a variety of fake antivirus applications. XP Security 2015, like many other fake antivirus programs, will create a series of warnings and pop ups in order to scare the user into purchasing the fake program. Some of these warnings which are created by XP Security 2015 can be found below.

“XP Security 2015 Firewall Alert!
XP Security 2015 has blocked a program from accessing the internet.
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen. Private data can be stolen by third parties, including credit card details and passwords.”

“Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.”

XP Security 2015 will also modify Internet Explorer to show the following alert listed below when the browser is opened. It will continue to show the following when visiting websites. It will essentially redirect the webpage to the following.

“Internet Explorer alert. Visiting this site may pose a security threat to your system!

Possible reasons include:

Dangerous code found in this site’s pages which installs unwanted software into your system.
Suspicious and potentially unsafe network activity detected.
Spyware infection in your system.
Complaints from other users about this site.
Port and system scans performed by the site being visited.

Things you can do:

Get a copy of XP Security 2015 to safeguard your PC while surfing the web (RECOMMENDED).
Run a spyware, virus and malware scan.
Continue surfing without any security measures (DANGEROUS).”

It is recommended to use safe mode when removing the virus because XP Security 2015 will generally not be able to load in safe mode. To enter safe mode, restart the computer and press F8 multiple times before the Windows screen to bring up the boot options.

Boot Menu

The safe mode with networking option will allow the user to be able to use the internet in safe mode. XP Security 2015 can be removed by using the

or by manually removing the virus.

View XP Security 2015 Files
View XP Security 2015 Keys

Manual XP Security 2015 Removal – In order to manually remove XP Security 2015, the processes associated with XP Security 2015 must be stopped, the files associated with the processes must be removed, and the registry entries must be corrected to the previous state before XP Security 2015 entered the computer.

Stop XP Security 2015 Processes (Learn How To Do This)
[random letters].exe

The executable for XP Security 2015 will generally be a series of three characters or PW.exe.

Remove XP Security 2015 Files (Learn How To Do This)
C:\Documents and Settings\[username]\Local Settings\Application Data\[random letters].exe

XP Security 2015 main executable file is a hidden protected system file. Turn on “show hidden files” and turn off “hide protected operating system files” in order to see these files. This feature can be found in the folder options in the view tab.

Remove XP Security 2015 Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER\Software\XP Security 2015
HKEY_LOCAL_MACHINE\SOFTWARE\XP Security 2015
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XP Security 2015

Remove XP Security 2015 Startup Entry (Learn How To Do This)
[random letters].exe

Your feedback is very highly valued by others so please feel free to comment below. Please feel free to share a solution that you may have used to remove XP Security 2015.

This entry was posted on Thursday, June 9th, 2016 at 10:31 pm and is filed under Malware Removal. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.

One Response to “XP Security 2015 Virus Removal Guide”

tomas lucian July 9th, 2016 at 7:40 am

no good

Leave a Reply