Wednesday, October 10, 2012

Removal of Win 7 Antispyware 2013 as a program doubled from another malware

Win 7 Antispyware 2013 is exactly the same program in terms of its user’s interface as Win 7 Defender 2013. Why two program have the same interface? In this case, because the programs are misleading. These are cheating tool s[raed by hackers to soak money from easy-go credulous and inexperienced users. .
Just like its double, the self-appointed security device mimics antivirus. In the meantime, antivirus is need to remove Win 7 Antispyware 2013.
Start free scan and get rid of Win 7 Antispyware 2013 and other threats regardless of their severity, complexity and payload.


Win 7 Antispyware 2013 fake security warnings:

Tracking software found!
Your PC activity is being monitored. Possible spyware infection. Your data security may be compromised. Sensitive data can be stolen. Prevent damage now by completing a security scan.

Security breach!
Beware! Spyware infection was found. Your system security is at risk. Private information may get stolen, and your PC activity may get monitored. Click for an anti-spyware scan.

Win 7 Antispyware 2013 Alert
System hacked!
Unknown programs is scanning your system registry right now! Identity theft detected!
Win 7 Antispyware 2013 activation code \ license key (will disable fake alerts):
3425-814615-3990

Win 7 Antispyware 2013 manual removal instructions:

Delete infected files:
%CommonAppData%\
%LocalAppData%\
%LocalAppData%\.exe
%Temp%\
%UserProfile%\Templates\
Delete infected registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = ""
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "%1" %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\ "(Default)" = "Application"
HKEY_CURRENT_USER\Software\Classes\ "Content Type" = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\\DefaultIcon "(Default)" = "%1"
HKEY_CURRENT_USER\Software\Classes\\shell\open\command "(Default)" = ""%LocalAppData%\.exe" -a "%1" %*"
HKEY_CURRENT_USER\Software\Classes\\shell\open\command "IsolatedCommand" = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\\shell\runas\command "(Default)" = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\\shell\runas\command "IsolatedCommand" = ""%1" %*"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%LocalAppData%\.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe"

No comments: