XP Internet Security (ave.exe removal)

XP Internet Security (clone of XP Defender Pro, XP AntiMalware 2010, Antivirus XP, XP Defense 2010) is a rogue antivirus that installed itself through various trojans and uses aggressive techniques to protect itself from removal.

XP Internet Security
XP Internet Security

If you’ll launch any executable – ave.exe instead launches XP Internet Security. This rogue also modify certain keys so that when you launch FireFox or Internet Explorer it will launch itself instead and display a fake firewall warning. XP Internet Security will scan your computer and then display a variety of false infections. It will not, though, allow you to remove any of these infections without first purchasing the program.
XP Internet Security - alert message
XP Internet Security - alert message

XP Internet Security is a rogue anti-spyware and a potentially significant threat to your PC security and your own privacy, remove XP Internet Security ASAP once detected in your computer.

GridinSoft LLC and Trojan-Killer.com IS NOT associated, affiliated, consorted, or connected with the publishers or creators of XP Internet Security.


XP Internet Security automatical remover:

  1. 1. Download the last version of Trojan Killer to clear (not infected) computer and install it
  2. 2. Update the virus database
  3. 3. Copy whole folder “c:\Program Files\GridinSoft Trojan Killer” to your memory stick
  4. 4. Rename “trojankiller.exe” to “explorer.exe”
  5. 5. Move memory stick to infected PC and run explorer.exe from “Trojan Killer” folder

The screenshot above displaying all the threats that Trojan Killer found. Please note that the infections found on your computer may be different than what is shown here
The screenshot above displaying all the threats that Trojan Killer found. Please note that the infections found on your computer may be different than what is shown here

As you might have foreseen, XP Internet Security is not a lonely walker in the empty space. In contrary, it has multiple ties with other rogues so that complex malware removal is the best way to get rid of XP Internet Security. In addition, if you remove XP Internet Security automatically, you get life-time protection from malware aggression.


XP Internet Security manual removal guide:

Delete XP Internet Security files:

%AppData%\ave.exe
%AppData%\av.exe

Delete XP Internet Security registry entries:

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1” %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1” %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1” %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1” %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1”

Leave a Comment

*