Win 7 Security 2012 Removal Process (remove Win7Security2012)

October 1, 2011

Win 7 Security 2012 is a rogue anti-virus program that pretends to be a legitimate application in order to scam unsuspecting computer users by persuading them to purchase its fake full version. Be aware that Win 7 Security 2012 is nothing but a scam, so you must never divulge your credit card information to Win 7 Security 2012 because you will surely just end up wasting your money on this no good software.

Win 7 Security 2012 Methods and Signs of Infection

Win 7 Security 2012 comes from the FakeRean malware clan, which is composed of a group of fraudulent security applications notorious for being able to change its name depending on the year and the operating system of the computer that it has infected. This means that this rogueware is a clone of fraudulent anti-virus programs like Win 7 Internet Security 2012, Vista Home Security 2012, XP Total Security 2011, Vista Security 2012 and XP Security 2012. Like its rogueware variants, Win 7 Security 2012 has the features and appearance of a legitimate anti-virus application, but PCHubs malware researchers have examined this program and confirmed that it has no capability at all in detecting and removing any kind of malware infection.

Win 7 Security 2012, once it has been installed on your computer without your permission, performs fake system scans and displays several pop-up alerts and messages saying that your computer’s security has been compromised. It would warn you that your computer is currently infected with several viruses, and it would promote that the only way to remove the detected infections is by using the full version of Win 7 Security 2012, which you would have to purchase from their website. However, Win 7 Security 2012 has been confirmed to be a bogus program, so don't ever divulge your credit card information unless you want to end up losing your money.

How to Secure Your Computer Against Win 7 Security 2012

The presence of Win 7 Security 2012 on your computer makes your PC more vulnerable to remote security attacks, so it is highly advised to remove this rogueware from your computer as soon as it is detected. The automatic removal process can be done with the use of a legitimate and strong anti-virus application that has been fully updated with the latest virus signature databases. Since Win 7 Security 2012 practically runs on your computer's background every time it is turned on, it is advised to do the removal process when your PC is rebooted in Safe Mode in order to prevent the Win 7 Security 2012 program from performing its counter-removal functions.

You can also choose to remove Win 7 Security 2011 manually, but you would need to be a knowledgeable computer user to troubleshoot your malware problem. In the manual removal process, you would need to delete all files, folders, registry entries, and processes that are related to Win 7 Security 2012.

Are you getting popups from Win 7 Security 2012? Have you identified that you have Win 7 Security 2012 installed on your computer? Do you wish to remove Win 7 Security 2012 completely from your computer?

Why should you remove Win 7 Security 2012?

If Win 7 Security 2012 resides on your computer, it can potentially damage your personal files or you may end up losing data stored on your system. Research has shown that Win 7 Security 2012 may have the ability to make your computer vulnerable to remote attacks which could result, initially, in loss of money, possibly identity theft, and, eventually, a painstaking Win 7 Security 2012 removal process.

How can you manually remove Win 7 Security 2012

Manual removal of Win 7 Security 2012 may not be for everyone. Each manual Win 7 Security 2012 removal step must be followed delicately to completely remove all related files and registry entries from your computer. If you are unsure or have doubts about editing your system registry, then we recommend that you use the automatic Win 7 Security 2012 removal process.

Win 7 Security 2012 can be removed manually by following the steps below.

  1. With all programs closed, click the Start Menu and go to the Control Panel.
  2. Locate the Add/Remove Programs icon and double click it.
  3. Locate Win 7 Security 2012 in the list of programs. If you find it, select it and remove it. If you cannot find Win 7 Security 2012, you can continue to step 5.
  4. Restart your computer.
  5. Close all open programs and windows on your desktop.
  6. Open your registry editor (regedit) program by going to Start Menu, type in regedit, and click OK.
  7. Find all of the following registry entries and delete them. If you do not know how to do this, then you can read how to edit the registry in Windows.

    HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%1" %*'
    HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%1" %*'
    HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'
    HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
    HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon "(Default)" = '%1" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%1" %*'
    HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
    HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = '"%1" %*'
    HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
    HKEY_CURRENT_USER\Software\Classes\exefile "(Default)" = 'Application'
    HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
    HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1"
    HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%1" %*'
    HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
    HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "(Default)" = '"%1" %*'
    HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "IsolatedCommand" – '"%1" %*'
    HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%Program Files%\Mozilla Firefox\firefox.exe"'
    HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%Program Files%\Mozilla Firefox\firefox.exe" -safe-mode'
    HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%Program Files%\Internet Explorer\iexplore.exe"'
  8. You may need to return to this removal process for removing Win 7 Security 2012. You can do this easily by bookmarking or adding a favorite to this page by clicking here. If you are using the FireFox web browser you can press the keys Ctrl and D simultaneously to bookmark this page.

    Image 1. Bookmark PCHubs removal process


  9. Delete all of the following files that are associated with Win 7 Security 2012 from your computer.

    %AllUsersProfile%\[RANDOM CHARACTERS]
    %AppData%\Local\[RANDOM CHARACTERS].exe
    %AppData%\Local\[RANDOM CHARACTERS]
    %AppData%\Roaming\Microsoft\Windows\Templates\[RANDOM CHARACTERS]

    If you need a better understanding on how to search for these files then you can read how to find and search for files and folders here.

    If you have issues deleting any of the previously listed files that are associated with Win 7 Security 2012, you can try rebooting your computer into safe mode. Booting into safe mode may allow certain malicious files to be deleted. If you are wondering how to boot into safe mode, you can read our process for starting a computer in safe mode here.

    Image 2. Select "Safe Mode with Networking"


  10. After locating and deleting the previous files you must remove all directories associated with Win 7 Security 2012 by going to the C:\ProgramFiles\Win 7 Security 2012 folder, select it, and delete it. In some cases you may not be able to find this directory. You can still continue to the next step.

  11. Restart your computer. You do not need to boot into safe mode at this point. You should have removed Win 7 Security 2012 completely from your computer. If you find that Win 7 Security 2012 is still on your computer, you can repeat the steps again or go to the automatic Win 7 Security 2012 removal process.

One Comment

  • Wally Corren says:

    Generally I am not able to even detect this win 7 malware crap. somehow that download you have detected it right away and then i registered to remove. all gone now and my pc is safe.

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as is:
What is 5 + 8 ?