Win 7 Defender Plus 2013

Win 7 Defender Plus 2013 - how to remove this scam from your PC?

Win 7 Defender Plus 2013 is a rogue antivirus program which pretends to detect various non existent security infections on user's PC. It's a fake antivirus software from a family of rogues called Braviax, Win 7 Defender Plus 2013 is a scam created by Cyber criminals to escort money from unsuspecting computer users. When this bogus security scanner infiltrates user's computer it will alter one's operating system registry settings and will set itself so start on every system start-up, furthermore it will disable user's Task Manager and will block execution of installed software. Fake security scans and false malware detection lists shown by this fake antivirus software are used to force computer user's into activating it's "full" version.

Notice that there is not such thing as full version of Win 7 Defender Plus 2013 - paying for the full version of this fake software equals to sending one's money to Cyber criminals. Notice that rogue security scanners from Braviax family are capable of adapting their name according to what operating system they infect - for example this particular fake antivirus program on a computer running Windows XP operating system would show itself as being XP Defender Plus 2013. If you see Win 7 Defender Plus 2013 scanning your computer for security infections and generating various security warning pop-ups you can be sure that your PC is infected with a fake antivirus program which is trying to scare you into purchasing it's useless licence key - ignore it and eliminate this scam from your computer.

While Win 7 Defender Plus 2013 may appear like a legitimate antivirus program in reality it doesn't have anything in common with real security programs - it's a scam which only pretends to detect malware and virus infections which doesn't actually exist on user's PC. Most commonly such rogue programs are being spread using drive-by downloads and Trojans. To prevent infiltration by such fake security scanners one should keep your operating system and all of the installed programs up-to-date, also don't forget to use legitimate antivirus and anti-spyware programs. If one's PC is already infected with Win 7 Defender Plus 2013 you shouldn't pay for it's full version - use the provided removal guide and eliminate this scam from your operating system.

Fake security warning messages generated by Win 7 Defender Plus 2013:

Tracking software found!
Your PC activity is being monitored. Possible spyware infection. Your data security may be compromised. Sensitive data can be stolen. Prevent damage now by completing a security scan.

Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.

Win 7 Defender Plus 2013 Firewall Alert
Win 7 Defender Plus 2013 has blocked a program from accessing the Internet. Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen Private data can be stolen by third parties, including credit card details and passwords.

Win 7 Defender 2013 removal:

IMPORTANT! Before downloading: Click "Registration" button which is located at the top right corner of the Win 7 Defender Plus 2013 program window, in the registration window enter one of these registry keys and click "Activate":

3425-814615-3990
1089-903874-1875
9443-077673-5028
2233-298080-3424
1147-175591-6550

When the registration key is entered, Win 7 Defender Plus 2013 will think, that you've purchased it and will stop generating fake warnings. It will also allow you to run programs and removers. Notice, that registering this program will not remove it from your PC - it will make it's removal less complicated.

Remover for Win 7 Defender Plus 2013

NOTE: If you cannot run anti-spyware software, try right-clicking on it and selecting "Run as administrator". If the installation of spyware remover fails, or you can't execute .exe files you can try running our Customized installer.

If after or before the removal of this fake antivirus you can't run any installed software download registry fix (link below). Save it to your computer, double click, click "Yes" and then click "OK". After rebooting your PC file associations should be fixed.

If You Can't open your Internet browsers (Internet Explorer, Google Chrome, Mozilla FireFox):

In the Search field enter this link:  www.pcrisk.com/installer.com and then press ENTER.
Win 7 Defender Plus 2013 will generate a fake warning after pressing ENTER, please ignore it and click "No, stay unprotected..." in this message

File download dialog will appear saying that you are downloading file installer.com. Click "Run", wait for download process to finish, then follow the on-screen instructions. Windows may warn you that opening unknown files may be unsafe, please ignore these warnings.

If your Internet browsers are functional, you can use this button to download anti-spyware software.

remover for Win 7 Defender Plus 2013

If the automatic removal method doesn't work, use these instructions:

Please follow these steps if your Internet browsers are blocked:

Step 1

When Win 7 Defender Plus 2013 finishes it's fake security scan, click the "register" button on the top-right corner of this program, when the registration window is opened, click  "Manual Activation"

Step 2

When Win 7 Defender Plus 2013 opens a Manual Activation window, enter one of these registry keys: 3425-814615-3990, 9443-077673-5028, 2233-298080-3424 or 1147-175591-6550 into the "Reg key:" field and click "Activate Now" button. After doing this Win 7 Defender Plus 2013 will thank you for the registration and will start removing all the "infections" that it had previously detected.  One shouldn't worry - these infections are fake.

Step 3

When the imitation of updates downloading is complete, your Internet browsers will start to function normally and you will be able to download and install anti-spyware software to remove this infection (download button below). Notice that activation does not remove Win 7 Defender Plus 2013 - this rogue will run in the background and it is recommended to remove it as soon as possible.

Remover for Win 7 Defender Plus 2013

If installation or downloading of anti-spyware software fails:

If you still can't run or download the anti-spyware software, download this registry fix file. It enables execution of applications and fixes web browser errors. Click on the link below, after downloading, click "Run", click "Yes" and then "OK".

If the installation of anti-spyware software fails, you can try downloading and running our Customized installer.

Alternative Win 7 Defender Plus 2013 removal guide:

Some malicous programs may disallow downloading anti-spyware software, if You can't download it using default location, try one of the alternative download locations:

• Location 1 (The file is renamed to "iexplore.exe" because most of spyware doesn't block this file)
• Location 2

If you still can't download or can't run anti-spyware software, please follow these steps:

Step 1
Download registry fix for Win 7 Defender 2013 Plus fake antivirus. This fix removes registry entries, that disallows execution of programs. After downloading double click win7_av_fix.reg file, click "Yes", when asked and then click "OK".

Step 2
Some variants of this rogue antivirus modifies system proxy settings so one couldn't access Internet. To reset proxy settings to default, download and run this tool:

Step 3
Win 7 Defender Plus 2013 modifies system hosts file. It is used to resolve some canonical names of websites to IP addresses. When this file gets modified user may be redirected to malicious websites while still seeing a good URL in address bar. To fix this, please download Microsoft FixIt tool, that restores your hosts file to windows default.

Step 4
Download Spyware remover or install and run it if already downloaded.

Win 7 Defender Plus 2013 manual removal:

If you are unable to remove Win 7 Defender Plus 2013 using the provided removal instructions , you can use this manual removal guide. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

 

End these Win 7 Defender Plus 2013 processes:

[RANDOM CHARACTERS].exe

Remove these Win 7 Defender Plus 2013 registry entries:

HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = ‘exefile’
HKEY_CURRENT_USER\Software\Classes\.exe “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = ‘%1? = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “(Default)” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’
HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1?
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “IsolatedCommand” – ‘”%1? %*’
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe”‘
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe” -safe-mode’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Internet Explorer\iexplore.exe”‘

Delete these Win 7 Defender Plus 2013 files:

%AllUsersProfile%\[random]
%AppData%\Local\[random].exe
%AppData%\Local\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%Temp%\[random]

 

Antispyware-software known to remove Win 7 Defender Plus 2013:

• iS3 STOPzilla
• Malwarebytes Anti-Malware

General tips on removing Win 7 Defender Plus 2013:

*If you can't download anti-spyware software: Click on the download link, when the save dialog opens change the file name (example: when downloading mbam-setup.exe rename it to iexplore.exe).
*If you have installed anti-spyware program but you can't run it: Click Run, type %ProgramFiles% and press Enter. Open folder of your anti-spyware program, search for executable file and rename it. (example: Open Malwarebytes’ Anti-Malware folder, right-click on the main executable file (mbam.exe) then click rename. Rename the mbam.exe file to iexplore.exe, winlogon.exe firefox.exe ...
*If you can't access your anti-spyware software, try creating a new user account:
Click Start -> Settings -> Control panel.
Click User Accounts and create a new account.
Reboot your computer and login using a newly created user account.
*After this procedure you should be able to access your anti-spyware programs. Update and run a full system scan.

Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.

If you can't access Internet:

Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.

Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.

After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program, then run a full system scan.