Home Articles Spyware Research Support Scan Now Purchase F.A.Q.

XP Security Tool

Alias: XP Security Tool

Description: XP Security Tool is another rogue anti-spyware application which may be secretly installed by a trojan or manually downloaded from one of many fraudulent Fake Scanner Sites.

XP Security Tool can block webpages and almost all executable programs from running, giving off warnings whenever you try to run a program or open a website. If this is your case, please follow the instructions below:

XP Security Tool Special Removal Instructions.

This procedure will require you to restart your computer so it is advisable that you bookmark this page for later reference.

Step 1: Restart your computer in Safe Mode with Networking. To go into Safe Mode, restart your PC normally and start tapping the F8 key until you are presented with DOS style options. For Windows XP, use the keyboard up/down arrow keys to select 'Safe Mode with Networking'. For Windows Vista select 'Windows Vista Advanced Boot Options' then select 'Safe Mode with Networking'.

Step 2: Your computer will start and give you an option to log is as Administrator. Select this option (log in as Administrator).

Step 3: Download and run SpyNoMore to removeXP Security Tool. Make sure to run SpyNoMore in 'Full Scan' mode and to select the entire drive you operating system resides on (in most cases this will be C:). Please remember SpyNoMore may detect XP Security Tool as Fake Alert trojan.

Step 4: After you have disinfected your computer, restart it once more normally. If you are unable to access the internet go to Control Panel > Internet Options > Connections > Lan Settings, then remove any checkmarks under the 'Proxy Server' section.

Once installed, XP Security Tool performs a system scan and displays exaggerated fake results. XP Security Tool also displays a fake Windows Security Center similar to the one below:

XP Security Tool can hijack Internet Explorer and prevent the user from visiting certain websites in which case it will display a warning page which says "visiting this website may harm your computer!". Additionally, XP Security Tool displays fake warning pop-up messages. All these attempts are to try and frighten the user into purchasing the full version of the application which costs $59.95.

Threat type:

Hijacker - A Hijacker is a software application that takes control of your browser's settings. Usually it changes your home page and redirects it to some unknown site or modifies your search settings. It prevents you from changing back your browser's settings. An infected browser usually operates much slower.

Ransomware - Ransomware is a software application that infects a computer and asks for money to have the infection removed.

Trojan - A Trojans or Trojan Horse is any programs that installs itself secretly normally via malware programs, quite often with sinister intent. Once installed, the trojan author (hacker) can gain complete control of the infected PC. Trojans are usually designed to steal sensitive information and/or destroy the system. Trojans can be distributed as unsolicited email attachments, or bundled with freeware and shareware programs.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer and / or to protect your privacy.

SpyNoMore removes XP Security Tool: Yes

Threat risk: Very High Risk
Remove XP Security Tool, XP Security Tool Remover
Extremely dangerous malware. Uses stealth installation, randomly named entries and has the capability to self update or resurrect after incomplete removal. Almost impossible to remove manually. Category mostly consists of trojans and spyware.


Icons appear in your Windows Tray.

Pop-up messages claiming that your computer is infected.

XP Security Tool may have been be installed without your consent via a trojan.

Access to certain websites is blocked and a fake warning page is displayed instead.

Browser can open to about:blank.

XP Security Tool Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with XP Security Tool, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:

File Signatures:

Registered Dll (Dynamic Link Library) Signatures:

Folder Signatures:

Registry Signatures:

SpyNoMore Collected Residual File Signatures:

See Also:
XP Antimalware 2010
XP Defender
XP Defender Pro
Digital Protection
AP Manager
I-Q Manager
Control Commander

Spyware Removal Home | Support | F.A.Q. | Spyware Removal Database | Privacy Policy | Site Map
Copyright © 2005-2012 Illysoft LLC