What is Xp internet security 2011 and how do I remove it from my computer?

In summary: If the virus is already there, it may not work. I recommend scanning your computer with an antivirus program to find and remove the virus.
  • #1
yungman
5,718
240
My computer is taking over by the XP Internet Security 2011. I cannot get onto the web. I have Mcafee internet, firewall and virus protection and it does not detect anything. WHat is this? Is this a spyware? What do I have to do to remove it or fix it. What do I have to watch out?


Anyone use 2-Spyware.com?
THanks

Alan
 
Computer science news on Phys.org
  • #2
It sounds like a virus.

A quick Google confirms this and provides instructions for removal.
 
  • #3
yungman said:
I have Mcafee internet, firewall and virus protection

That's your problem.

From whatever computer you used to post this do what JnJ said and google it.
 
  • #4
I had the same virus, with a different name. It seems to come in many different names and appearances.
The virus would run at random times and terminate the Microsoft antivirus, task manager, and other programs whenever I tried to run them.
We used a program called ComboFix to remove it. After running, ComboFix quarantined the virus to C:\Qoobox.

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32/FakeRean
XP Security 2011 is in the list of names the trojan takes on.
 
Last edited by a moderator:
  • #5
Thanks for the replies. Can someone give me a link to a free clean up program.


BTW, what's wrong with McAfee? should I change to another provider?
 
Last edited:
  • #6
BTW, what's wrong with McAfee?
Sorry, but I have a very strong dislike of McAfee. I used it for about 6 months.

At the beginning, everything worked great, it did it's daily scans, didn't find anything; I thought all was well.

About 3 months into using it, it developed a strange glitch. Every time I opened the window, all that would show would be a white box with the Windows GUI overlay. Even when I right clicked the task tray icon, it would just show a white box. I spent a couple days on the problem and a couple hours with customer support but to no avail the problem persisted. Even if I had been able to fix the problem the damage was done.

From there I went to AVG, when I ran the first scan, it flagged some suspicious files McAfee hadn't noticed and got rid of them accordingly.

To sum it up, even when McAfee is working, it really isn't working and when it isn't working, it's not working for good.

should I change to another provider?
Yes, I suggest Microsoft Security Essentials. It comes free with a legitimate Windows installation (even if it's not legit I know there are ways around it o:) ). It is not too extreme, but will find the files if they are there and it works well in the background.

A lot of people will say that since it is made by Microsoft it is the first thing that hackers target since it is going to cover such a large user base. While I do admit that this idea is valid, I don't think it should be a cause for concern. Any virus that can get through MSE is going to get through all the other mainstream providers and as long as you keep your wits about you when using the internet (read: don't try to open up an exe file when you downloaded a movie [people complain about that lots]) you should be fine.
 
  • #7
KrisOhn said:
Sorry, but I have a very strong dislike of McAfee.

I'll second that.

AVG is the best free one I've come across.

Everytime I've seen McAfee so far it's been on a computer with a virus - and McAfee has been taken over and reporting all is fine!
 
  • #8
Thanks guys

I guess I am going to go away from McAfee!
 
  • #9
Yes the MS Security Essential seems to do the job. I am using the infected computer to do this right now. Thanks Krisohn. You are of big help.
 
  • #10
yungman said:
Yes the MS Security Essential seems to do the job. I am using the infected computer to do this right now.
:uhh:

When I tried that, it didn't work. I thought it did, but the virus simply hid and came back later. The virus is already in your system, so it may not work. I scanned my computer and found nothing, but it was still there.
Whenever the virus would run, it would terminate MSE. In the history for MSE was three or four instances where MSE detected the virus, but the virus prevented MSE from stopping it.

On your computer, if MSE shows up "no viruses detected" then it's not working.
If MSE detects the virus and removes it, then it's working.
 
Last edited:
  • #11
My preferred malware removal technique is:
Code:
format c:
 
  • #12
jhae2.718 said:
My preferred malware removal technique is:
Code:
format c:

Mine is to build on that technique by following the command with a Linux installation.
 
  • #13
So what should I look out for?

Should I just recover the computer with the recovery disk came with it?
 
  • #14
yungman said:
Should I just recover the computer with the recovery disk came with it?

That is ideal, but not necessary if you don't want to.

A manual removal of any virus is harder than a virus scanner doing it, but if the virus scanner doesn't detect it, it is possible.
 
  • #15
Well, reinstalling the OS would work, if you don't backup your stuff and put it on the new installation. We were about to do that, and I started copying the My Documents folder and other stuff.
We found ComboFix, removed the virus, and abandoned the fresh-os-install idea.
I found out later that the virus exe had been in the My Documents folder, so if we had continued the new installation and put the backed-up stuff on it it probably would have the same problem. The virus has its files in multiple locations.

Here is one place to download ComboFix:
http://www.bleepingcomputer.com/download/anti-virus/combofix
You may want to do some Googling to read up on it.

Various sites say that it wasn't intended for "the average user", but how I remember it we put it on a USB drive, plugged it into my infected computer, ran ComboFix.exe and *poof* FakeRean gone.

Note that the person helping me told me "don't do anything" after double-clicking on ComboFix.exe. So I recommend to not click, press buttons, or anything while its running, or it might mess up. But I don't really know.
 
Last edited:
  • #16
jarednjames said:
Mine is to build on that technique by following the command with a Linux installation.

I as well.
 
  • #17
FtlIsAwesome said:
:uhh:

When I tried that, it didn't work. I thought it did, but the virus simply hid and came back later. The virus is already in your system, so it may not work. I scanned my computer and found nothing, but it was still there.
Whenever the virus would run, it would terminate MSE. In the history for MSE was three or four instances where MSE detected the virus, but the virus prevented MSE from stopping it.

On your computer, if MSE shows up "no viruses detected" then it's not working.
If MSE detects the virus and removes it, then it's working.

It did say it found the trojan virus and removed it.
 
  • #18
yungman said:
It did say it found the trojan virus and removed it.
Ok, glad it worked. It didn't work for me, hmm.
 

1. What is Xp internet security 2011?

Xp internet security 2011 is a type of computer malware or virus that disguises itself as a legitimate antivirus software. It is designed to trick users into purchasing the full version of the software in order to remove fake threats and protect their computer.

2. How does Xp internet security 2011 infect computers?

Xp internet security 2011 can infect computers through various methods such as malicious email attachments, fake software updates, or by exploiting vulnerabilities in a computer's security software.

3. What are the signs of a computer infected with Xp internet security 2011?

Some common signs of a computer infected with Xp internet security 2011 include pop-up messages claiming to have found viruses on the computer, slow computer performance, disabled security software, and unusual error messages.

4. How can Xp internet security 2011 be removed?

The best way to remove Xp internet security 2011 is by using legitimate antivirus software. You can also try manually removing the malware by following specific instructions for your operating system. It is important to note that manually removing the malware can be difficult and may not completely remove all traces of the virus.

5. How can Xp internet security 2011 be prevented?

To prevent Xp internet security 2011, it is important to have updated antivirus software and to be cautious when opening email attachments or downloading software from unknown sources. It is also recommended to regularly back up important files and to keep your operating system updated with the latest security patches.

Similar threads

Replies
17
Views
778
Replies
5
Views
1K
  • Computing and Technology
Replies
12
Views
2K
  • Computing and Technology
3
Replies
78
Views
6K
  • Computing and Technology
Replies
4
Views
1K
  • Computing and Technology
Replies
3
Views
1K
  • Computing and Technology
Replies
24
Views
2K
  • Computing and Technology
Replies
13
Views
2K
  • Computing and Technology
Replies
3
Views
2K
  • Computing and Technology
Replies
22
Views
4K
Back
Top