Wednesday, October 10, 2012

How to remove Win 7 Home Security 2013 virus?

Win 7 Home Security 2013 is a bogus anti-virus program. Win 7 Home Security 2013 suddenly popups on your PC Tell that some severe virus is detected on your PC and recommends to buy Win 7 Home Security 2013 commercial version. But!!! Take into consideration: all its scans, warnings, and alerts are fake. It shows the same stuff to everyone. The idea is to scare you senseless so that you will be willing to hand over your credit card information to pay for the nonexistent full version. I hope you have not let it get that far.

The best way to protect against pests like this is to have a good antivirus/antispyware program in place. And if you don’t feel like buying one, well then the only way to not get junk like this on your PC is to avoid all the shady parts of the internet where these things breed.

In order to remove Win 7 Home Security 2013 rogue the removal guide is prepared for you. If you have difficulties deleting this virus please leave the comment below.

Win 7 Home Security 2013 virus cleanup procedure:

  • Run GridinSoft Trojan Killer: Click Win+R and type the direct link for the program’s downloading. http://trojan-killer.net/download.php
  • If your PC is totally blocked and any attemps to launch the computer in such manner are in vain, use this method: take your USB flash drive / Memory Stick and download GridinSoft Trojan Killer installation file from this site http://trojan-killer.net/download.php and save it to your USB flash drive / Memory Stick. Get back to your infected PC and insert the USB Drive / Memory Stick into the respective USB slot.
  • Install GridinSoft Trojan Killer. Right click – Run as. Uncheck the checkbox as displayed below.
  • Note!

    Don’t uncheck the Start Trojan Killer checkbox at the end of installation! checkbox

Manual removal guide of Win 7 Home Security 2013 virus:

Delete Win 7 Home Security 2013 files:

  • %LocalAppData%\[rnd_2]
  • %Temp%\[rnd_2]
  • %UserProfile%\Templates\[rnd_2]
  • %CommonApplData%\[rnd_2]

Delete Win 7 Home Security 2013 registry entries:

  • HKEY_CURRENT_USER\Software\Classes\.exe
  • HKEY_CURRENT_USER\Software\Classes\.exe\ [rnd_0]
  • HKEY_CURRENT_USER\Software\Classes\.exe\Content Type application/x-msdownload
  • HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
  • HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon\ %1
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\ “[rnd_1].exe” -a “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\IsolatedCommand “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\ “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\IsolatedCommand “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\ Application
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\Content Type application/x-msdownload
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\DefaultIcon
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\DefaultIcon\ %1
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open\command
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open\command\ “[rnd_1].exe” -a “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open\command\IsolatedCommand “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas\command
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas\command\ “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas\command\IsolatedCommand “%1″ %*

No comments:

Post a Comment