Win 7 Security 2012 is a name changing rogue which has already infected thousands of computers. This rogue changes its name according to the operating system you are using. If you are using Windows XP, It will change its name to XP Security 2012 and If you are using Windows Vista, It will change its name to Vista Security 2012 . This software uses Windows logo on its main interface so that users can be tricked into thinking that the software is coming from Microsoft.
Once the software is installed on your computer, It will launch itself before you run any other program and It has a tendency to take over all the operations on your computer. If you will try to launch any program, say Notepad, this rogue software will block Notepad from running and launch itself instead. You need to remove Win 7 Security 2012 from your computer quickly to avoid any further damages.
Here are a few messages which are intimidating and used by the rogue software to push consumers into purchasing full version of fake software. They are using scare tactics to fool consumers and sell them a bogus software forcefully.
Privacy threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair
Win 7 Security 2012 Alert
Security Hole Detected!
A program is trying to exploit Windows security holes! Passwords and sensitive data may be stolen. Do you want to block this attack?
Don’t get worried about any of the error message when you computer is under the grip of Win 7 Security 2012 Virus. Remove this malware as soon as possible and all the bogus alerts will automatically stop.
Win 7 Security 2012 Removal Methods
A) Automatic Removal
Automatic removal method works best for the people who want to remove the malware without any additional headaches. This method guarantees result as you remove the rogue using a genuine Spyware Remover. As soon as you scan your computer, the rogue software will be caught and removed completely. If you want to follow this method, you can download Spyware Doctor by clicking the button below.
Spyware Doctor is capable of scanning your computer for any rogue products and remove them completely. You just need to download it and conduct a full scan of your computer. Spyware Doctor allows you to scan your computer for free and requires payment If you want to remove all the threats automatically.
B) Manual Removal
Manual removal method is recommended for people who are well versed with computers. If you don’t know your way with computers, this method can be risky as removing a wrong file can create further consequences. Please follow this method carefully :
1. Try Restoring Your Computer’s Settings
When you are dealing with a rogue, System Restore should be your first resort. Click on Start—>Programs—>Accessories—>System Tools—>System Restore and restore all settings of your computer to an earlier date. If you are able to do a successful System Restore, you don’t need to follow any other steps. (Learn How To Do a System Restore)
2. Enter This Registration Key in Rogue Antivirus
If the rogue software has disabled the system restore functionality, then please enter the registration key 2233-298080-3424 in the software. This key will reduce malicious effects of the software to a great extent as the rogue product will consider that you’ve paid for the product. This key will stop all the pop-ups appearing on your PC but please note that you still need to remove Win7 Security 2012 from your computer.
3.Use Windows Registry Editor To Remove Startup Entries
Click on Start—>Run, type “regedit” and click OK button. Remove these registry entries (Learn How To Edit Registry):
HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”C:\Users\<Current User>\Local Settings\Application Data\[3 random letters].exe” /START “%1″ %*’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”C:\Users\<Current User>\Local Settings\Application Data\[3 random letters].exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”‘
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”C:\Users\<Current User>\Local Settings\Application Data\[3 random letters].exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”C:\Users\<Current User>\Local Settings\Application Data\[3 random letters].exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”‘
HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = ‘exefile’
4. Search and Delete Malicious Files
Find these files in your computer and remove them completely. Please note that I’ve written “random letters” below as filenames. It means that file will have a strange name and consist three characters in the file name. (Learn How To Search and Delete Files)
\Users\<Current User>\AppData\Roaming\Local\.exe
\ProgramData\90olpwthc51njhu8i1skk1ls
\Users\<Current User>\AppData\Roaming\Local\90olpwthc51njhu8i1skk1ls
\Users\<Current User>\AppData\Roaming\Roaming\Microsoft\Windows\Templates\90olpwthc51njhu8i1skk1ls
\Users\<Current User>\AppData\Local\Temp\90olpwthc51njhu8i1skk1ls
Once you are done with above steps, reboot your computer in Normal mode of windows and you computer should be already. If you still face fake pop-ups and other problems, give a try to automatic removal method in case there are traces of virus left on your computer. Automatic removal is the best method to remove the rogue and guarantees complete removal of the virus. You can follow either of both methods according to your expertise level.
Loading ...
