Win 7 Home Security 2011 virus – how to get rid

February 20, 2011 By

Theres a new malicious program known as Win 7 Home Security 2011. This piece of software belongs to fake antivirus and antispywares of rogue virus family that keep changing names and interface but use the same tactics to trick users into buying these bogus tools. Win 7 Home Security 2011 malwares gets into a computer with the help of downloader trojans and worms from malicious websites that drop this parasite into a computer secretly. After getting into a computer, this virus installs its additional components and then it runs its fake scanner utility on the infected computer each time the system is rebooted. The fake antivirus scan of Win 7 Home Security 2011 virus generates some scan results with fake error reports. It frequently displays warnings messages and threat alert popups to scare user. These popups tell the user that Win 7 Home Security 2011 has detected some viruses and spywares onto your computer that must be removed very soon to protect your system from further damages. All these Alerts and warning messages are fake, they do not belongs to the infected computer as they are tricky messages to convince user buying Win 7 Home Security 2011 to get rid of those viruses.

Remember! warning messages and alerts displayed by Win7 Home Security virus are fake. This program is specially designed to extort your money by offering you to buy its fake system security and optimization products. it has no ability to detect and remove viruses from your computer. You should ignore these warnings, avoid buying this program, avoid its installation and immediately remove it from your computer upon detection.

How to get rid of Win 7 Home Security 2011 virus manually:

To remove this virus manually, complete the following set of tasks. Do not forget to create a backup before getting started to the manual removal guide.
Stop Win 7 Home Security 2011 processes:
[random name].exe

Remove 7 Home Security 2011 Registry Entries:
HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = ‘exefile’
HKEY_CURRENT_USER\Software\Classes\.exe “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = ‘%1′ = ‘”%UserProfile%\Local Settings\Application Data\[random 3 letters].exe” /START “%1″ %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “(Default)” = ‘”%1″ %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’
HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1′
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random 3 letters].exe” /START “%1″ %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1″ %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “IsolatedCommand” – ‘”%1″ %*’
HKEY_CLASSES_ROOT\.exe\DefaultIcon “(Default)” = ‘%1′
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random 3 letters].exe” /START “%1″ %*’
HKEY_CLASSES_ROOT\.exe\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\.exe\shell\runas\command “(Default)” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\.exe\shell\runas\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\exefile “Content Type” = ‘application/x-msdownload’
HKEY_CLASSES_ROOT\exefile\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\exefile\shell\runas\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random 3 letters].exe” /START “%1″ %*’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random 3 letters].exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”‘
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random 3 letters].exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random 3 letters].exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”‘

Remove Win 7 Home Security 2011 files:
%AllUsersProfile%\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Local\[random].exe (look for 3-letter names)
%AppData%\Local\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Roaming\Microsoft\Windows\Templates\t3e0ilfioi3684m2nt3ps2b6lru
%Temp%\t3e0ilfioi3684m2nt3ps2b6lru

Auto Removal

To remove this virus Automatically, We suggest following tools:

Malware Bytes Anti-Malware

download Win 7 Home Security 2011 virus how to get rid
OR

Super Anti Spyware

download Win 7 Home Security 2011 virus how to get rid

Filed Under: 1: Spyware Removal Tagged With: , , , ,

Fake Windows Security & Control virus removal

January 19, 2011 By

Windows Security & Control is just a fake computer optimization and protection software. Windows Security & Control is a virus that claims to be a legitimate system optimizer and malware removal tool although it is a virus itself. This virus belongs to the fake Windows optimization and Security virus.
fake windows security and control virus Fake Windows Security & Control virus removal
This virus generates fake error reports telling user about threat infections. it displays annoying popups that offer the user to use Windows Security and Control`s (fake) products to use to get rid of these threats. It asks to pay the registration fee of Windows Security and Control program. Do not pay for this program as it is a scam and it takes your money for doing nothing because it has no ability to detect or remove viruses from your computer.
It displays the fake warning alert message like this:

Threat prevention solution found
Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.
Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a seriuos possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press ‘OK’ to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.

Remember! All these warning messages and alerts displayed by this virus are fake. You should ignore these warnings, avoid buying this program, avoid its installation and immediately remove it from your computer upon detection.

How to get rid of this virus manually:

To remove Windows security and control virus manually, follow the instructions below.

Stop Windows Security & Control processes:
[random word].exe

Remove Windows Security & Control Registry Entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%AppData%\[random].exe”

Delete Windows Security & Control files:
%AppData%\[random].exe

Auto Removal

To remove this virus Automatically, We Suggest the following removal tools:

Malware Bytes Anti-Malware

download Fake Windows Security & Control virus removal
OR

Super Anti Spyware

download Fake Windows Security & Control virus removal

Filed Under: 1: Spyware Removal Tagged With: , ,