Win 7 Antivirus 2013 - how to remove?
Win 7 Antivirus is not a legitimate antivirus software - it's a scam developed by Cyber criminals. This program was created with a purpose of tricking PC users into purchasing it's useless licence key to remove non existent security infections. All computer users who purchases Win 7 Antivirus 2013 are actually sending their money to Cyber criminals. You shouldn't trust this software, it originates from a family of fake antivirus programs called Braviax. This family of rogues is well known for it's name changing fake antivirus programs. All of the bogus programs from this family are capable of detecting operating system of the computer that they are about to infiltrate and change their name accordingly.
The same rogue antivirus software on a computer with Windows XP operating system would appear as XP Antivirus 2013 (Windows Vista users would see it as Vista Antivirus 2013). Such trickery is applied to make their fake security scanners appear more legitimate. When installed on users PC Win 7 Antivirus 2013 will immediately start a fake security scan and will eventually generate a long list of supposedly detected malware and viruses. You shouldn't be tricked by this process - it's totally fake, none of the infections that are detected by Win 7 Antivirus 2013 actually exists on your computer. If you this program scanning your computer for security threats you can be sure that your PC is infiltrated with a fake antivirus software. Notice that paying for the full version of Win 7 Antivirus 2013 would equal to sending one's money to Cyber criminals, moreover you would give away your banking information which could lead to further money thefts from your credit card account.
Cyber criminals have created Win 7 Antivirus 2013 in several variants, here are the screenshots of this rogue (3 versions):
Win 7 Antivirus 2013 wants to convince PC users into thinking that their computers are at risk in order to sell it's useless licence key. PC users should use cautious when purchasing security software to protect their computers - Internet is full of fake ones, so one should always do some research before buying an antivirus program. Furthermore none of the legitimate antivirus programs starts a security scan every time user loads their operating system. This fake antivirus program is being distributed using exploit kits, these malicious programs are capable of injecting one's computer using found security vulnerabilities. Most common source of fake antivirus programs are infected email messages, malicious websites and drive-by downloads. To protect your computer from such security infections one should always keep your operating system and all of the installed software up-to-date, furthermore you should always use legitimate antivirus and anti-spyware software. If you see Win 7 Antivirus 2013 on your computer you should know that all of the security scans and warning messages are fake, this program is a scam and it should be eliminated from your computer.
Fake security warning messages generated by Win 7 Antivirus 2013:
Activate your copy right now and get full real-time protection with Win 7 Antivirus 2013!
Attention: Danger!
ALERT! System scan for spyware, adware, trojans and viruses is complete. Win 7 Antivirus 2013 detected 30 critical system objects. These security breaches may be exploited and lead to the following:
Your system becomes a target for spam and bulky, intruding ads
Browser crashes frequently and web access speed decreases
Your personal files, photos, documents and passwords get stolen
Your computer is used for criminal activity behind your back
Bank details and credit card information gets disclosed
Click REGISTER to register your copy of Win 7 Antivirus 2013 and perform threat removal on your system. The list of infections and vulnerabilities detected will become available after registration.
Win 7 Antivirus 2013 Alert - Win 7 Antivirus 2013 has blocked a program from accessing the Internet
This program is infected with Trojan-BNK.Win32.Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.
Name: Microsoft Windows Operating System
Location: C:\Windows\System32\Taskmgr.exe
Company: Microsoft Corporation
Version: 6.2.9200.16384
Windows recommend Activate Win 7 Antivirus 2013
Click "Yes, Activate…" to register your copy of Win 7 Antivirus 2013 and perform threat removal on your system.
Yes, activate Win 8 Antivirus 2013 (Recommended)
No, Continue unprotected (Dangerous)
Win 7 Antivirus 2013 removal:
IMPORTANT! Before downloading: Click "Registration" button which is located at the top right corner of the Win 7 Antivirus 2013 main window, and when registration window opens enter this registry key in the "Reg key" field and click "Activate":
9443-077673-5028
1089-903874-1875
3425-814615-3990
When the registration key is entered, Win 7 Antivirus 2013 will think, that you've purchased it's full version and will stop generating fake security warning messages. It will also allow you to run programs and anti-spyware software. Note, that registering this program will not remove it from your PC, it will just disable the fake pop-up windows and will alow to access the Internet. After you enter this key, you can now download the recommended spyware remover (use the button below) and get rid of this bogus antivirus software.
Remover for Win 7 Antivirus 2013
NOTE: If you cannot run remover, try to right-click on it and select "Run as administrator". If installation of spyware remover fails, or you can't open .exe files you can try our Customized installer, built by our technicians to bypass spyware infections and install removers anyway. It is a DOS program, that most of spyware doesn't block.
If after or before removal of this scam you cannot run your installed programs, this means that Win 7 Antivirus 2013 have modified your operating system's .exe file associations. When you try to run any executable, Windows would open "select program" dialog and wouldn't execute a program. To fix it, download a registry fix (link below). Save it to your computer, double click it, click yes and then ok. After rebooting your PC file associations should function normally.
If You Can't open your browser (Internet explorer, firefox, Opera):
Win 7 Antivirus 2013 hijacks Internet browsers, modifies registry settings and disables execution of programs. For such cases our developers have made a custom installer. It is useful when you can't browse the Internet and can't execute .exe files. It starts like MS-Dos program, runs some registry fixes then initiates execution of a installer. When tested this installer worked on Windows 7, Windows Vista and XP, infected with most common spyware infections.
To use this installer click Windows logo button (Start)
In the Search field enter this link: www.pcrisk.com/installer.com and then press ENTER.
Win 7 Antivirus 2013 will generate fake warning after pressing ENTER. please ignore it and click "No, stay unprotected..." on this message
File download dialog will appear saying you are downloading file installer.com. Click Run, wait for download to finish then follow the on-screen instructions. Windows may warn you that opening unknown files may be unsafe, please ignore these warnings.
If your Internet browsers work, you can use this button to download customized installer.
Customized installer to break through this infection
If automatic removal method doesn't work, use the instructions, provided below:
Please follow these steps to get back the control of your browser:
Step 1
When Win 7 Antivirus 2013 finishes it's fake scan, click the "register" button on the top-right corner of this program. When the registration window is opened, click "Manual Activation"
Step 2
After Win 7 Antivirus 2013 opens a Manual Activation window, enter this key: 9443-077673-5028 or 3425-814615-3990 into the "Reg key:" field and click "Activate Now" button. After doing this Win 7 Antivirus 2013 will thank you for the registration and will start removing all the "infections" it have found. Don't worry, these infections are not real. When it removes the infections, another Update window appears. This rogue program will imitate the download of updates.
Step 3
When the imitation of downloading the updates is complete, your Internet browsers will work normally and you will be able to download and install a spyware remover to eliminate this infection (download button below). Note that this activation does not remove Win 7 Antivirus 2013. It will run in the background and it is strongly recommended to remove it.
Remover for Win 7 Antivirus 2013
If installation or downloading fails:
If you still cannot run or download removal tool, download registry fix file. It enables normal execution of applications and fixes web browser errors. click on the link below, when download completes click run, click yes and then OK.
If the installation of spyware remover fails, you can try our Customized installer, built by our technicians to bypass infections and install removers anyway.
Manual Win 7 Antivirus 2013 removal instructions
Some spyware can block downloading spyware removers. If You can't download it using default location, try one of the alternative download locations below:
- Location 1 (The file is renamed to "iexplore.exe" because most of spyware doesn't block this file)
- Location 2
If installation of the remover fails, please try downloading customized installer, which was built by our technicians to bypass spyware infections. Download customized installer
If you still can't download or can't run spyware removing software, please perform these steps:
Step 1
Download registry fix for Win 7 Antivirus 2013 malware. This fix removes registry entries, that disallows executing of programs in some variants of this spyware, to download it, click the link below. After downloading double click win7_av_fix.reg file, click Yes when asked and then click OK.
Step 2
Some variants of this spyware modifies system proxy settings and you can't access Internet or website addresses is redirected to malicious or phishing websites. To reset proxy settings to default, download and run this tool:
Step 3
Win 7 Antivirus 2013 modifies system hosts file. It is used to resolve some canonical names of websites to ip addresses. When it is changed, the user may be redirected to malicious site still seeing good URL in address bar. It is very hard to find out if the site is genuine or not, when hosts file is modified. To fix this, please download Microsoft FixIt tool, that restores your hosts file to windows default. Run this tool when downloaded and follow the on-screen instructions. Download link below:
Step 4
That's It! You can now try to download Spyware remover or install and run it if already downloaded. In most cases this leads to a success, if not, please describe your problem in our FORUM and our technicians will try to help you.
Win 7 Antivirus 2013 manual removal instructions (advanced users):
If you are unable to remove Win 7 Antivirus 2013 automatically , you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)
1. Load your computer in safe mode with networking. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.
2. Download registry fix file After saving the file to your desktop - double click fix.reg and then click YES to confirm.
3. Open Internet explorer, click Tools and select Internet Options. Select "Connections".
4.Click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.
End these Win 7 Antivirus 2013 processes:
[RANDOM CHARACTERS].exe
Remove these Win 7 Antivirus 2013 registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = ‘exefile’
HKEY_CURRENT_USER\Software\Classes\.exe “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = ‘%1? = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “(Default)” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’
HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1?
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “IsolatedCommand” – ‘”%1? %*’
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe”‘
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe” -safe-mode’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Internet Explorer\iexplore.exe”‘
Delete these Win 7 Antivirus 2013 files:
%AllUsersProfile%\[random]
%AppData%\Local\[random].exe
%AppData%\Local\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%Temp%\[random]
5. Download recommended anti-spyware software to completelly remove Win 7 Antivirus 2013 from your computer.
Other tools known to remove Win 7 Antivirus 2013:
General tips on removing Win 7 Antivirus 2013:
*If you can't download anti-spyware software: Click on the download link, when the save dialog opens change the file name (example: when downloading mbam-setup.exe rename it to iexplore.exe).
*If you have installed anti-spyware program but you can't run it: Click Run, type %ProgramFiles% and press Enter. Open folder of your anti-spyware program, search for executable file and rename it. (example: Open Malwarebytes’ Anti-Malware folder, right-click on the main executable file (mbam.exe) then click rename. Rename the mbam.exe file to iexplore.exe, winlogon.exe firefox.exe ...
*If you can't access your anti-spyware software, try creating a new user account:
Click Start -> Settings -> Control panel.
Click User Accounts and create a new account.
Reboot your computer and login using a newly created user account.
*After this procedure you should be able to access your anti-spyware programs. Update and run a full system scan.
Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.
If you can't access Internet:
Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.
Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.
Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.
After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program. Then run a full system scan.
Additional information: