Sunday, May 1, 2011

Remove Win 7 Anti-Virus 2011 Counterfeit and Parasite

The program is a half-counterfeit and a half-parasite.It reports merely invented system problems. That provides a ground for its determination as a counterfeited system improver.
Further on, Win 7 Anti-Virus 2011 comprises totally free scanners that actually detect system problems, but there are two problems in such utilization, luck of authorization of  the free scanners developers and poor quality of such tools. It should be emphasized that the tools  applied by Win 7 Anti-Virus 2011 in violation to their owners rights do not pretends to provide exhausting system protection. They often fail to recognize a good half of threats and in overwhelming majority of cases are useless against  latest releases of computer infections.
If genuine scanners fail do detect adequate number of infections, the adware will add intentional false positives to prove the system is in danger and thus provide a reason for its paid activation.
Even the threats that have been actually detected will not be cured, if you activate the counterfeit.
Get rid of Win 7 Anti-Virus 2011 as inappropriate and illegal software product. Click here to apply best quality free scanner for the purpose of Win 7 Anti-Virus 2011 removal.

Win 7 Anti-Virus 2011 screenshot:




Rogue anti-spyware removal tool:



Win 7 Anti-Virus 2011 manual removal guide:
Delete infected files:
 %UserProfile%\AppData\Local\pw.exe
%UserProfile%\AppData\Local\MSASCui.exe
%UserProfile%\Local Settings\Application Data\pw.exe
%UserProfile%\Local Settings\Application Data\MSASCui.exe

Delete Win 7 Anti-Virus 2011 registry entries:
 HKEY_CURRENT_USER\Software\Classes\pezfile
HKEY_CLASSES_ROOT\pezfile
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CLASSES_ROOT\pezfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"

No comments: