Uninstall/Remove XP 2012 Security Firewall Alert, How to get rid of XP 2012 Security Firewall Alert Manually

Nick

June 22nd, 2011

Questions are often asked:

Can anyone give me info on XP 2012 security alert? All of a sudden this program pops up saying I'm infected and my only option is to purchase this. It looks like a windows XP program. No matter what I try to do on my computer like control panel or maintenance this friggin thing pops up asking me to purchase this program. How can I get rid of this. Any help will be greatly appreciated.

Description of XP 2012 Security Alert

XP Security 2012 is a fake security program which pretends to be a legit malware removal tool. It is highly dangerous and will keep making chaos to the computer system. This rogue anti-spyware usually comes unnoticeably without any permission asked, and just like many other threats, XP Security 2012 may block programs to prevent itself from being removed, and can also hijack your web browser to redirect you to harmful websites. The creators of these programs involve additional code that distributes the ads, which can be viewed through pop-up windows or through a bar that occurs on a computer screen and sometimes through text links or in search results. If you believe your computer is infected with malware or malicious software, please update and run your antispyware software scans to be sure your not infected. But it is strongly suggested that this XP 2012 Security needs to be removed as soon as possible to return you a clean computer.

How did I get this XP 2012 Security Virus?

It is normally for computer users getting this infection without any knowledge and notice. XP 2012 Security can affect computers via doubtful file-sharing applications, multimedia downloads, or through undesired spam emails even unkown"free"software. So when you click on a strange email or download other malicious programs, your computer may have been infected by this annoying XP 2012 Security virus.

XP 2012 Security Screenshot

Fake warnings and alerts you can see:

System warning!
Security Essentials Ultimate Pack software detects programs that may compromise your privacy and harm your systems. It is highly recommended you scan your PC right now. Click here to start.
Security Alert!
Your computer is being attacked from a remote machine !
Block Internet access to your computer to prevent system infection.
This is just a few things that the virus may show to you. And there are plenty of fake message you can see. So no matter what you can see about the virus, just ignore them and do not trust any one of them. Here let's go on the manual steps.

Can't remove XP 2012 Security virus by anti-virus programs?

Many computer users downloaded antivirus programs but can not remove it successfully. This is because the XP 2012 Security is very stubborn and it can prevent from the scanning of antivirus programs. This is not the worst thing. After infeted by this virus, you may not be able to use any programs. The anti-virus programs will be disabled by the virus and the network will be blocked as well. The virus try to segregate your computer and make you helpless. The This is really frustrating and pain. Never mind, here we will told you that:

The most effective way to remove XP 2012 Security virus completely:

Since many computer users had the same experience that this kind of virus couldn't be removed by any anti-virus applications. So the manual approach is always needed. And here is the manual removal step-by-step guide for all computer users.

1. All associate files of XP 2012 Security Virus to be deleted:

%AppData%\Local\[random].exe
%Temp%\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%AppData%\Local\[random]
%AppData%\Local\[random].exe
%AllUsersProfile%\[random]

2. DeleteXP 2012 Security Virus registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random].exe" /START "%Program Files%\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random].exe" /START "%Program Files%\Mozilla Firefox\firefox.exe" -safe-mode'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random].exe" /START "%Program Files%\Mozilla Firefox\firefox.exe"'
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random].exe" /START "%1? %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random].exe" /START "%1? %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "IsolatedCommand" – '"%1? %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "(Default)" = '"%1? %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "IsolatedCommand" = '"%1? %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random].exe" /START "%1? %*'
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1?
HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\exefile "(Default)" = 'Application'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = '"%1? %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = '"%1? %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = '"%1? %*'
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon "(Default)" = '%1? = '"%UserProfile%\Local Settings\Application Data\[random].exe" /START "%1? %*'
HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'

(Important: This is a virus deletion release. I do not recommend you do it unless you're experiencing an issue with that before or you are not computer newbie. You can get assistance with Tee Support experts to avoid any mistakes.)