XP Security 2013 Removal

What is XP Security 2013?

XP Security 2013 is a rogue anti-virus software program that is categorized under the Win32/FakeRean family of malware. This rogue anti-virus software program gets on to penetrate your pc via numerous downloads from corrupted web sites and as it invades your pc's system it will notify you whenever Windows starts up. The XP Security 2013 will notify you that there are infections to your pc via a rogue pc scan. And that you can not remove this rogue pc application unless you purchase the complete version online.

Some XP Security 2013 screenshots:
XP Security 2013

XP Security 2013 will notify you continuously stating that your pc is under attack by malware and that all your personal files will probably be lost unless you pay for the total version of the software application. And aside from generating a bogus scan and bogus messages of system attacks it can also send you bogus messages like you need to click "Remove All" or "Prevent Attack" but once you do, you will be led to a page that will insist you buy the complete version of XP Security 2013.

Some of the XP Security 2013 fake security alerts and warnings that users may get:
XP Security 2013 Alert System Integrity Check Warning! Sensitive data may be sent over your internet connection right now! Threat: Trojan-PSW.Win32.Antigen.A
XP Security 2013 Firewall Alert XP Security 2013 has blocked a program from accessing the internet Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen Private data can be stolen by third parties, including credit card details and passwords.
XP Security 2013 Alert Security Hole Detected! A program is trying to exploit Windows security holes! Passwords and sensitive data may be stolen. Do you want to block this attack?

It is strongly recommended that anyone who has this malware to get rid of it immediately after it pops-up. There are many trustworthied antispyware programs that can eliminate XP Security 2013.

Associated XP Security 2013 System Entries and files

XP Security 2013 Processes

XP Security 2013 Files

XP Security 2013 Registry Entries

How to Stop XP Security 2013 Fake Alerts

To register XP Security 2013 and stop its fake warnings, use the following fake license key.

XP Security 2013 registration code: 3425-814615-3990

NOTE: this code will NOT remove XP Security 2013 from your computer, it will JUST stop the annoying alerts and messages.

XP Security 2013 Removal Instructions

Step 1: Reboot in Safe Mode with Networking

To restart your computer in Safe Mode with networking:

  1. Restart your computer.

  2. When you see the computer manufacturer's logo, press and hold the F8 key.

  3. On the Advanced Boot Options screen, use the arrow keys to highlight Safe Mode with Networking, and then press Enter.
    Safe Mode with Networking Screen

  4. Log on to your computer with a user account that has administrator rights.

Step 2: Disable XP Security 2013 Proxy Server

XP Security 2013 may add a proxy to its package. Its goal is to get the information through the Web connection (password etc).
It also helps to block the connection to certain sites (eg malware removal help sites) or to block the download of trustworthy antispyware and antivirus programs.

The following steps reset the Internet Explorer proxy settings in the Windows registry so that you can access the Internet again:

  1. Click Start, and then click Run. (Keyboard Shortcut: Windows logo + R)

  2. Copy and paste or type the following text in the Open box in the Run dialog box:

    Run dialog box

  3. Click OK.

  4. click Start, and then click Run.

  5. Copy and paste or type the following text in the Open box in the Run dialog box:

  6. Click OK.

Now that you have disabled XP Security 2013 proxy server, you will be able to browse the web again with Internet Explorer.

  1. Click Start, and then click Run. (Keyboard Shortcut: Windows logo + R)

  2. Type in iexplore.exe.
    Run iexplore.exe

Step 3: Stop XP Security 2013 processes

In order to stop XP Security 2013 from interfering with our removal procedure, we need to end and kill its processes. For this, we will use a FREE powerful utility called RogueKiller.

RogueKiller (by Tigzy) is a tool written in C++, which scans the running processes, and kills those which are malicious. This tool was developed based on speed execution, which will clean the running processes before being killed.

To terminate XP Security 2013 process:

  1. Always in Safe Mode Download RogueKiller to your desktop from the following link:

    RogueKiller Download link
    RogueKiller Setup Icon
    RogueKiller is a portable application, so you don't need to install anything.

  2. XP Security 2013 may block all executable files, so when you launch the RogueKiller file, it will execute itself. So Rename RogueKiller.exe to RogueKiller.com or winlogon.exe or iexplore.exe

  3. At this point a "pre-scan" will complete and stop any malicious process. Also a list of options will appear along the right-hand side.
    RogueKiller Pre-Scan

Step 4: Remove XP Security 2013 registry keys

To remove XP Security 2013 malicious registry entries, we will need RogueKiller again.
RogueKiller also checks for rogue Registry entries, rogue drivers, and Master Boot Record (MBR) issues, so rootkits will be cut.
RogueKiller can also fix and restore a Host file, delete any Proxy entries, repair shortcut problems and unhide files.

CAUTION: This tool is not for beginners. In this step we will ONLY use the Registry tab.

To Delete XP Security 2013 Registry entries:

  1. Always in Safe Mode run a scan, open RogueKiller and click on Scan.
    RogueKiller Scan Progress

  2. After a while, you should see a screen with scan results like the following one:
    RogueKiller Scan Results

  3. Click on the Registy tab, then click on the Delete button.
    RogueKiller Delete Registry Entries

Don't Reboot you computer yet, please stay in Safe Mode.

Step 5: Remove XP Security 2013 files

Malwarebytes Anti-Malware is simply the best known FREE malware removal tools online.

To remove XP Security 2013 files:

  1. Download Malwarebytes to your desktop from the following link:
    Malwarebytes Anti-Malware Download link
    MBAM Setup Icon

  2. Just Follow the easy setup process. Do not make any changes to the default settings
    When the setup is finished, make sure you leave both the Update Malwarebytes Anti-Malware and Launch Malwarebytes Anti-Malware checked.
    You can check or uncheck the Enable free trial of Malwarebytes Anti-Malware PRO as the malware removal is FREE.
    Then click on the Finish button. If Malwarebytes prompts you to reboot, please do not do so.
    Malwarebytes Anti-Malware Setup Wizard

  3. When Malwarebytes is launched, it will ask you to update the databse. Just click OK.
    Malwarebytes Anti-Malware Updating

  4. On the Scanner tab,select Quick scan and then click on the Scan.
    Malwarebytes Anti-Malware Quick Scan Screen

  5. When the scan is finished a message box will appear, click OK to continue.
    Then the screen results will show the various malware infections including XP Security 2013 that Malwarebytes has found on your computer.
    the image below is just an example, your results will be different.
    Click on the Remove Selected button.
    Malwarebytes Anti-Malware Quick Scan Results Screen

  6. After Malwarebytes has finished the removal of XP Security 2013, you will get a message stating that you need to reboot your computer.
    Just Do so, and restart your computer in Normal Mode.
    Malwarebytes Anti-Malware Quick Reboot Message

Step 6: Check for any XP Security 2013 left over

To make sure that your computer is now completely free of XP Security 2013, redo a Malwarebytes scan in Normal Mode.
After your are finished, Reboot your PC as asked by Malwarebytes anti-malware.


Sarah MelbenchI am Sarah Melbench and I am an Anti-Malware Enthusiast! I created this website to spread the word about the lastest malware infections. I write guides and tutorials about malware removal as well as reviews of anti-malware programs.Follow me on G+

Tagged with: ,
Posted in Manual Malware Removal
12 comments on “XP Security 2013 Removal
  1. John says:

    Thanks Sarah! Your walkthrough was easy to understand from an analysts’ point of view. I was able to remote my customer’s computer and remove this malware without haveing to make a special visit or have them send the PC to me via UPS.

  2. Maynor Galvez says:

    Sarah, Thank you so much, You are great. You guide is very clear and easy to folow. Thanks again.

  3. Ginger says:

    I am trying to do this, but when I press F8, I am getting a Keyboard error message, how can I get around this?

    • Sarah says:


      1. In normal mode go to Start then Run.

      2. In the Run box type in msconfig.

      3. Click on the Boot.ini tab

      4. Click the checkbox next to /SAFEBOOT and select Network.
        MSCONFIG Safe Mode Networking

      5. Reboot your computer for the changes to take effect. The computer will boot into SafeMode with networking and allow you to do what you need to do to clean XP Security 2013.

      6. Once you have completed the malware removal steps, you need to reopen MSCONFIG following the instructions above and uncheck the /SAFEMODE box under Boot Options so that the computer will boot into normal Windows mode the next time you start it up.

  4. boblinc says:

    Thank you Sarah for the excellent removal guide. I’m a former tech and these days I solve computer probs for my friends. I notice you changed your “Step 3” to use RogueKiller to stop the XP Security 2013 processes instead of using Process Explorer. Good move as this saves having to download Process Explorer. However, I feel Process Explorer is a very valuable tool that everyone who works on computers should have in their tool kit.

    Anyway, a friend called and he had XP Security 2013 on his computer. I followed your instructions to the letter and his machine is now malware free.

    Thank you again, boblinc

    • Sarah says:

      Your are very welcome boblinc.
      And about the Process Explorer, I had a feedback that it might be a little complicated for the average user, so that’s why I changed it to RogueKiller in order to kill malicious processes.

  5. Mitsi Le Ann says:

    Thank you so much for the removal info.

  6. anne crawshaw says:

    Your information was exactly what I was looking for! No idea where this crap came from but I wish I had nothing better to do with my life than figure out ways to screw other peoples lives! Aaaaargh to the people who invent these things.

  7. Jeff says:

    I can’t thank you enough!! These steps were easy to follow …. Thank you Sarah!

  8. Goe186 says:

    Thank you. Thank you. Thank you.

  9. Adam says:

    my computer has this, its sofaking annoying, it keeps saying it found 3051 viruses >:O

  10. rani says:

    Thank you sooooooooooooooooooooooooooooooo much I don’t know where that “xp security 2013” came from but the guy who made it should be jailed !!

Leave a Reply

Your email address will not be published. Required fields are marked *