XPStartup.exe is a worm W32.Elitper.F@mm.
XPStartup.exe spreads using MS Outlook and via open network shares.
XPStartup.exe tries to terminate antiviral programs installed on a user computer.
Related files:
%ProgramFiles%\Windows Media Player\svchost.exe
%Userprofile%\Start Menu\Programs\Startup\XPStartup.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\XPStartUp.exe
C:\Torrie&Stacy.exe
C:\ProgramFiles\Torrie&Stacy.exe
%ProgramFiles%\SP2 UPDATE.exe
%Windir%\TASKMGR .exe
%ProgramFiles%\Internet Explorer\Iexplore .exe
%ProgramFiles%\Internet Explorer\Norton Internet Security.exe
C:\Virus Detected.txt
C:\Incomplete\Torrie & Stacy Nude ScreenSaver.exe
C:\My Downloads\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Edonkey2000\Incoming\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\BearShare\Shared\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Grokster\My Grokster\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Morpheus\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\KaZaA Lite\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Kazaa\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\KMD\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
%UserProfile%\My Documents\Downloads\Torrie & Stacy Nude ScreenSaver.exe
%UserProfile%\Local Settings\Application Data\Shareaza\Incomplete\Torrie & Stacy Nude ScreenSaver.exe
Adds the value:
"Firewall" = "%Program Files%\SP2 UPDATE.exe"
"Protection" = "%Program Files%\Internet Explorer\Norton Internet Security.exe"
"SysRes" = "%Program Files%\Internet Explorer\IExpIore .exe"
to the Windows startup registry keys.
More info: http://securityresponse.symantec.com/avc...
Removal:
Kill XPStartup.exe process and remove XPStartup.exe from Windows startup using RegRun Startup Optimizer.
Removal: XPStartup.exe is removed by RegRun.
Read more... Removal instructions...
Recommended software:
UnHackMe - easy removal Rootkits/Adware/Spyware.
http://www.unhackme.com
RegRun Security Suite - removal and protection.
http://www.regrun.com
RegRun Reanimator - free removal tool.
greatis.com/reanimator
RegRun - User's Choice
Vista Programs - full info...
What is hidden in MSDN?
.NET Secrets Revealed
Why software developers prefer Win32.FreeTechSecrets.com?
All Unix Manuals in Alphabetical Order
C# controls for .NET in 3 simple steps.
Constantly updated. Last update:
May 12 2008
Interesting information about Vista programs...
Need consultation?
Would you like to add your opinion?