Win 7 Anti-Virus 2012 - How to remove

Win 7 Anti-Virus 2012

Braviax

Win 7 Anti-Virus 2012 is another creation of cyber criminals. It’s is a fake antivirus tool that secretly sneaks into computers and uses malicious methods in order to get users trust and sell them a useless program. The program infiltrates with a help of Trojan viruses and acts on the system despite your will.

Win 7 Anti-Virus 2012 loads its fake scanner and simulates system scan. However, it doesn’t detect real infections and instead of that generates fabricated scan results where none of the “detected” files are harmful. Less experienced computer users may take these scan results for granted and then follow the next steps that it offers to you. If you fall for this trick, the application will easily gain some money from you. Basically, Win 7 Anti-Virus 2012 will state that it can remove all the infections that were detected on your computer but first you must purchase its license. As soon as the program reveals your credit card information, it will be charged.

While Win 7 Anti-Virus 2012 is running on your system, you will also notice a variety of pop up ads and security notifications claiming that your system is at risk because of spyware infections and other security issues:

XP Total Security 2012 Firewall Alert
XP Home Security 2012 has blocked a program from accessing the internet
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.

Vista Security 2012 Alert
Internet Explorer alert. Visiting this site may pose a security threat to your system!
Possible reasons include:
– Dangerous code found in this site’s pages which installed unwanted software into your system.
– Suspicious and potentially unsafe network activity detected.
– Spyware infections in your system
– Complaints from other users about this site.
– Port and system scans performed by the site being visited.

Things you can do:
– Get a copy of Vista Security 2012 to safeguard your PC while surfing the web (RECOMMENDED)
– Run a spyware, virus and malware scan
– Continue surfing without any security measures (DANGEROUS)

Malware Intrusion
Sensitive areas of your system were found to be under attack. Spy software attack or virus infection possible. Prevent further damage or your private data will get stolen. Run an anti-spyware scan now. Click here to start.

To remove Win 7 Anti-Virus 2012 follow these instructions:

First, change system date (clock is in status bar right) to date 7 days after infections. Reboot PC. This might force it to uninstall, as Win 7 Antivirus 2012 is made to attack person for 6 days and later partially uninstalls (till next attack).
Second, Try fake-registering Win 7 Anti-Virus 2012 using the code 1147-175591-6550, 2233-298080-3424 , 3425-814615-3990 (updated on 2011.11.29) or 9443-077673-5028 (updated 2012.01.14). This might make malware think that you have paid for it, so it will not block legitimate programs.

The harder way is to launch Process Explorer ( https://www.2-viruses.com/wp-content/uploads/PE/eXplorer.exe for alternate download location) and stop all processes that launch from %TEMP%, %Application Data% or similar user-related folders and are not known processes. If you stop correct processes you will notice Win 7 Antivirus 2012 icon closing.

Lastly, whatever way you choose, you should scan your PC from remaining trojans and infections with spyhunter, Spyhunter and your regular antivirus. Upgrading your PC defenses is important step for Win 7 Anti-Virus 2012 and similar rogues prevention.

Automatic Malware removal tools

Download Spyhunter for Malware detection
(Win)

Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions,

Download Combo Cleaner for Malware detection
(Mac)

Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy ,

Manual removal

Win 7 Anti-Virus 2012 facts
Download Spyhunter for Malware detection
(Win)

Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions,

Download Combo Cleaner for Malware detection
(Mac)

Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy ,

TOC

    354 responses to “Win 7 Anti-Virus 2012”

    1. thanks friend. the shit software was disturb my PC and closed me to format it.after launch the serial that you given. lucky my PC was back to normal

      thanks again 🙂

    2. Where did this idiotic software come from in the first place? This thing is attacking my com right now, i cant launch explorer or mozila fox. Im using my phone right now. Im using wins 7, where do i change the date???

    4. Thank you, I have no idea how this got on. But my daughter is trying to apply for scholarships and we only have the one computer. People are so inconsiderate. Not everyone has extra money lying around. A lot of us have struggled to get the money for the computers we have. I am getting this info from my work computer for I can do nothing on mine. I hope this helps, I do appreciate the info.

    5. thanx man.ur serial num. worked.i thought i have to setup my pc again.now i dont have to.so thnx again..:)

    6. Hello all Just a good tip here, if you unhide your ‘Aptdata’ folder then look under ‘Local’ you will see Win 7’s exe file rite there under api.exe and qol.exe delete these two files and you get rid of the virus, however; you will also loose the ability to use any type of .exe file 🙁 the best way to fix this is to goto “http://www.thewindowsclub.com/repair-fix-windows-7-vista-problems-with-fixwin-utility” before you delete the virus files, and download the utility. YOU MUST HAVE A PROGRAM TO EXTRACT .RAR FILES! when you extract the rar file you can see the FixWin application run it and your set all of you .exe files will work again just like new!
      I hope that this will help you to get you system back and running!

      Also don’t forget to run a registery scanner for the little buggers hiding there as well.

      Happy Hunting

    7. Thank you very much!! The calender date trick worke like a charm. People have nerve to do something like this… Thanks for the rips and having my computer live once more!

    8. Hello,

      This stupid virus is blocking my computer. Ive tried resetting the date but the win 7 antivirus 2012 screen keeps popping up preventing me changing the date??
      anyone got any ideas?

    9. Manenment thanks for the help.
      i couldn’t find the win 7’s exe file, but i used this awesome program called malwarebytes to find and delete it. 😀

    10. oh. found the files.
      their names for me are:
      ironcache
      mct

      DELETE THEM!!! MUA HAHAHAHAHA!!!!
      (what a fail virus)

    11. Thanks, double tap on the date and I’ve got my computer back.
      Drama over, thanks again

      Jock

    12. i cant even change the date, that f-ing thing keeps popping up and blocking…any easier alternative..thought i was onto a winner there

    15. I managed to change the date by doing it straight after a reboot, don’t think the virus had time to kick in fully so I was able to change it, did another reboot and thankfully things are looking ok now :o) thanks for the advice xx Can I change my date back to the correct one and if so when? Many thanks again xx
      Can’t be sure but I think I got it from a facebook quiz!

    17. Maisie Debs, i love you! it worked for me….however i have yet to change the date back! is it ok to do so?…Thanks again on this beautiful day June 28th!

    18. Thank you so much for the help on this site! Dont know what I would have done without the advice given!

      As a couple of others have said, can I change the date back or leave it??

      Thanks again 🙂

    19. You should change it back and do a system scan to remove all the traces. You might miss windows updates if your date is wrong.

    20. @Jerry
      Happy to help Jerry, so glad it worked for you 🙂 I’m just going to try to change the date back now and do a system scan so fingers crossed for us all!
      Thanks admin for the update and for helping us all out xx

    21. I’m fixing this on my girlfriend’s Dell laptop right now. If the malware won’t let you change the system clock via windows, reboot your computer and go to the BIOS settings, usually accomplished by pressing F2 right after your computer reboots.

    22. Just finished the scan and it found 6 items, removed 3 and put 3 in quarantine.
      Good luck everyone sorting yours out xx

    23. Okay, I have tried changing the date both in the lower right hand corner and in the control panel and it keeps coming up with the virus. I also tried the key and am getting and invalid key code.

    25. yayyyy the date thinggg worked. if that ever happens again i will find those fuckers and kill them.

    27. Andrea: Mcafee is poor against malwares, though adequate for most of the viruses. I recommend using some sort of secondary scanner for malware with mcafee, like Malwarebytes full version (real time protection) or Hitman Pro (scheduled second opinion scans).

    28. I’ve seen 3 computers with this problem in the past 2 days! They were all on different operating systems (XP, Vista and Win7) but all were fixed by Malwarebytes (free)…

      You’ll ideally need access to another computer to download it then put it onto a memory stick – with a bit of googling you can find a recent ‘definitions’ file to manually download too (recommended). If you don’t have access to another computer then log on using a different username (always a good idea to have a separate ‘admin’ log on for situations such as this!), as in my experience this malware wont bug you on another username.

      Install and open malware bytes: if you only have one username on your computer, you may need to right-click on the malwarebytes icon/setup file and select ‘run as administrator’. For the first run, select ‘quick scan’ which should pick up about 6 objects. When the scan is completed select ‘remove all’ – it will probably ask you to restart your computer to complete removal.

      Next, run malwarebytes again making sure you update to the latest definitions file. This time run a full system scan and will probably find one more object – remove that then you should be in the clear! I’d recommend scanning your computer with your regular antivirus software just for good measure.

      Hope this helps!

      Carlos

    29. Carlos, I should add that one should upgrade their antivirus if it passed something through. Malwarebytes full version is a quite good addition to protection. Or change antivirus to stronger (maybe internet security version).

    30. admin :
      Carlos, I should add that one should upgrade their antivirus if it passed something through. Malwarebytes full version is a quite good addition to protection. Or change antivirus to stronger (maybe internet security version).

      Good point – I’ve seen this problem appear on machines running Mcafee (not sure which version) and Sophos Antivirus (Enterprise). So far I’ve never seen it on a machine running Norton Internet Security but I’m sure there’s plenty others that will protect against it.

      As you said, the key is to use an internet security package and not just an antivirus program on its own.

    31. Carlos: for ages we recommend either Internet Security Suites or secondary malware scanner with real time protection + firewall. In most of the cases that is enough. I would not prioritize one good antivirus over another – all can miss some parasites, and all do.

    32. hey all
      why the register number is invalid
      i can’t register that number on this program

    34. I just got my notebook 3 months ago and I have never had this problem. Very recently on my notebook, it deleted my AVG AND my Malware bytes. I ended up doing a factory restore and it did the same thing… within 10 minutes from finishing the restore.. it deleted my os system. Now Im relying on my roommate’s netbook to see what can be done. I was told that my notebook is now better off being recycled now thanks to that POS program. it would cost more than a new one to repair.

    35. John :
      I’m fixing this on my girlfriend’s Dell laptop right now. If the malware won’t let you change the system clock via windows, reboot your computer and go to the BIOS settings, usually accomplished by pressing F2 right after your computer reboots.

      Thanks John. It wasnt letting me change the date through either the control panel or the status bar, but i tried what you suggested and it seems to have worked. Thanks again!

    36. I don’t know who you are “admin” but thank you. I went home and fixed the date. Yes, I had to do it during the reboot and did not run in “safe w/networking” and the MFking virus seems to be gone. I wasn’t able to run any of my gadgets (pedometer, sky-caddie, i-tunes) while in safe-mode. Why do i even pay for NORTON utilities, doesn’t do sqwat and when you call support they try to sell you support for $99. I also use SUPERANTIspyware and Lavasoft Ad-aware. Why can’t the FEDS bust these idiots since they are able to process credit card info??

    37. JIM: Norton is ok, but it depends which version you got. Ad-Aware is average for me, SuperAntiSpyware is a bit better. SuperAntiSpyware does not have real-time protection in free version, though some people assume it does (it keeps running even if it does not protect your PC at that point).
      However, the main problem is that no antivirus or anti-malware can be (even theoretically) 100% proof. It is impossible. All the tests that show that anti-malware is 100% are made with parasites that are already known to malware researchers. And parasites are released daily. So, the rate of protection depends on how fast you get definition updates and how efficient they are at getting samples and testing for fresh parasites.

    38. YAY!! Changing the time really worked!!!

      Thank you very much! Now I can get some work done!

    39. Seriously Thank you so much this Help alot every other place of instruction never worked. But you my man are a genius

    40. to al you people who have had this problem as well I’m currently running Reimage which scans your pc for problems and damaged files and fixes them I dont know exactly if it worked yet but I got this info fromk a friend its suppose “how ever you spell it at this time xD” to replace damaged files with new ones and rid the computer of malware spiyware and viruses if it does not succeed I will use avg or norton And to the admin Again Thanks

    41. After spending over an hour trying to take back control of my laptop, I came upon this thread. I changed the date and was able to run my malware antivirus. Thank you all for the tips!!!!!

    42. Changing the date, rebooting & then Malwarebytes Anti-Malware worked for me. Downloaded onto a flash drive on another computer, then downloaded to infected computer (found 5 infected items). I did switched my date back & ran scan again (found 1 more)! THANK YOU! THANK YOU! I read & watched a bunch of other posts & videos – They all tried to sell you something else & had confusing tasks that didn’t help. Your help is appreciated!!!!!

    43. The codes worked for me, thank you very much! The only problem I have now is that my Norton security (paid for) has been disabled. Any ideas would be welcome, thanks in advance!

    44. Codes disable it temporally. Reboot, and try launching Norton manually. I would recommend scanning with Malwarebytes or Spyware Doctor if you wont be able to activate Norton that way. This would mean you still have infections and they are still partly active.

    45. what is the code? please tell me its driving me insane:( I need my laptop to work urgently

    47. You are the freaking Man! 17 web sites, multiple other strategies tried, nothing worked, virus blocked me from doing everything I tried, even changing the date initially, but after a reboot I was able to change the date before the virus could get fully going and it fixed it! Running anti programs now.

      To the P.O.S.’s who design and implement these things… I would love to get my hands on you. F.U. I hope you enjoy your karma!

    49. Noob: Learn about rootkits & linux infections too. They are less visible, but still there. Malware is not a valid reason to change os’es (I use linux quite often myself too).

    50. I’ve tried EVERY suggestion listed here, and still can’t get this off my laptop. It accepted the registration key given, but I can’t do anything else. Changing the date did not help, and scans run by McAfee, and Malwarebytes do not detect any issues or infected files. After entering the registration key, I don’t get the continuous warnings anymore, but it’s still blocking my internet access, and other programs. What else can do ?!?

    51. Mab: Have you updated mbam before scan? If yes, then try other removers as well: Spyware Doctor, Hitman Pro, SuperAntiSpyware.

    52. Since I can’t access the internet, can these other removers be downloaded and ran effectively from a USB? Or would they need to be transferred to my infected computers desktop first?

    55. Hi,

      Wow… thanks for informing it… changing date just clicked…. just tell me if i change my system date back to normal, will this virus (Win 7 antivirus 2012) again come to my system??????

    56. Jain9999: no. However, to be 100% sure, scan with good anti-malware programs after changing date back. There might be some sort of trojans left. Also, upgrade your antivirus.

    57. Changing the date worked for me also! BUT all of my data (pictures, Excel files) is missing from my C drive. Any suggestions?

    58. Tim: You need to unhide them. Typically, malware does not delete these, just makes them hidden. Make sure you see both system and hidden files in each of the folders

      1. Go to Start|Run and type:
      cmd
      in the run box. Click OK.
      2. type the following in the command prompt:
      attrib -h -s
      Make sure you add a space after the -s.
      3. Drag and drop the file you want to change onto the command prompt window.
      4. Press enter.
      5. Repeat 2-4 for each file.

      OR
      1. Launch cmd
      2. CD into the folder you need files fixed
      3. run attrib -h -s *.*

    59. admin
      Thanks for the quick response!! Unfortunately the folders where I store my pictures and Excel files say that they are “Empty” so I am not able to do as you instructed. I’ve tried to “restore default libraries” where the data was located, but I still get NOTHING!!!
      Any other suggestions?

    60. Yes, resetting computer’s date to one wk ahead worked. Then reboot your computer and change the date back to normal. Next do a windows system restore. Do a system restore back to last wk. If you don’t know how to do that google “windows system restore”. Or do this. Open System Restore by clicking the Start button , clicking All Programs, clicking Accessories, clicking System Tools, and then clicking System Restore. Do a system restore back to last wk. This solved my problems with this virus/menace. Thank’s for your help!

    65. Hey man i tried every sugestion here listed above and one worked (the regestration) but its still in my laptop and i dont know how to get rid off it please help me and my anti-virus such as malware bytes and AVG deosn’t work i cant install these

    66. fews days a go my computer got virus and accedently i formated my D drive and it got my recovry and now i lost it can some one tell me how to get it back please

    67. hey guys can u please tell me how to find the virus files because i entered the code and its regestered now and the virus is still in my computer but i have no idea to delete it, my malware bytes and AVG deosn’t work thanks

    68. THANKYOU!!!!! I used the change the date fix and it worked, i was having a minor panic attack about it all. Thanks so much 🙂

    69. Thank you very much.

      You SAFE me as I was doing a very critical job and inflected by this virus, I almost want to pay it via my credit card due to the urgency.

      Luckily I found your guide here before I proceed to pay, else I can’t imagine how the worst after they got my card info.

      Once again, thank you very much and you really SAFE me.

    70. God Bless you guys…changed the date and restarted, and the thing is gone. I will always trust you guys in the future if these IMBECILES return. Thanks ALOT!!!!!! =)

    72. what if i entered the code first without changing the date?? help im confused and the program is still on my computer.

    74. Thanks for the advice,
      The virus did not let me change the date but the second code worked.
      Even after the code was accepted I still couldn’t start any.exe files. I restarted my PC in safe more and restored it to how it was 2 days ago. That sorted it.
      I could not fine the virus exe files though

    75. Thanks for the advice,
      The virus did not let me change the date but the second code worked.
      Even after the code was accepted I still couldn’t start any.exe files. I restarted my PC in safe mode and restored it to how it was 2 days ago. That sorted it.
      I could not fine the virus exe files though

    76. Changing the date and time worked to stop the pop ups and allow me Internet access so that I could download malwarebytes. Thanks for the post and all the readers comments!

    77. thanks a lot buddy . you are great , may god bless u. your code has saved my computer

    78. Thank you Thank you Thank you, I was going crazy trying to figure out what this crap was!!! Changing the date and time also worked for me 🙂 and to think I was getting ready to pull my credit card out O_o

    84. HEY, MAN PLISE help me , because i use your key, then its worked , bt how to remove this win 7 antivirus 2012 plz tel me , because i am so scayrd by this ,…..

      plz help me…
      🙁

    86. Thanks! Changing my system date worked for me too. Changed the date to 7 days later, rebooted comp, ran malware bytes quick scan, deleted the Trojan dropper issue, rebooted again, ran malware bytes full scan, deleted three hijack issues, reset system date, renootedna final time, and it looks like all is well. Thanks again!!!

    87. I got attacked by this but as soon as it appeared I knew something was up as my normal a-v was working fine yet a message said all a-v had been disbaled…typical virus technique…anyways instantly went to control panel and did a system restore to a safe point 3 days previous to the attack then run a full a-v scan should this work?

    88. Richard : yes, though I would scan with separate (preferably anti-malware) program too. The reason being is following : If your antivirus allowed Win 7 Antivirus to infect your PC, it does not have it in their database. So, you are risking for fast reinfection.

    91. I have the same issues where I can not get on the internet to even download the free spyware doctor scanner due to the site win 7 anti virius what do I do????

    92. Lori use the code which is shown above of this page and then restart your computer with safe mode and this will allow you to access to internet and then download anti virus ( I recommened) Norton 360, scane your computer and it’s all fix….. Thats how I did with my computer

    93. i have same issues bu i cant do it..some1 please help me..IM NEWBI

      cant stop this notif

    95. Well, I rebooted my computer into safe mode and the Win 7 antispyware program was still operating. So, I changed the date 7 days after the infection day and rebooted into normal mode. Now, it looks like the program dissappeared. Internet explorer had a message saying it had been restored to it’s default settings. Don’t know how it happened, guess it was dumb luck.

    96. I dont know if it was pure luck, but for me this was a simple fix. I performed a system restore to before my computer became infected, and voilla, after my computer rebooted, the virus was gone and my computer was up and running again. Hope this helps for anyone else out their whos having the same problem.

    97. Either Im a complete idiot or it is not working for me. I was able to change the date, but perhaps its not correct, it did not work for me. How do I know what actual infection date was?

    98. Misters, there is a program which can remove automatically completely this virus? thanks

    100. Can’t Thank you enough. Your code worked. Why aren’t the powers going after these crooks? Again Thanks, Dave

    101. I read this too late. The laptop crashed and I had to use the recovery disk to get the laptop to even turn on. They already charged my credit card. Is there no way that I can get my money back? If they have my credit card information wouldn’t they be able to charge me whenever they wanted for antivirus protection?

    106. Just got the awesome Win 7 virus… NOT!… anywho, after reading this article, I changed the date and time like you said and it was able to let me open up my Malware bytes and just before I hit scan, I turned the date and time back, quickly hit scan and now while Malware Bytes is kicking its ass there are pop ups comming out all over the place, but my Malware is finding all those nasty buggers (2 so far and only 3 minutes in)!…. Thanks a lot for the advice friend I really thought I was going to have to pay a ton of money to get my computer fixed. : ) Much appreciation and love!

    107. This virus has done a ton of damage and wont let me open up most programs on my computer, Outlook In explorer, control panel.. It comes up with an error code like they no longer exist… Has this virus gone too far on my computer where it’s now screwed?

      I’m shitting bricks here as it is my work laptop!

      Please help

    108. Brilliant!!!!!!! messed about for 4 hours downloading free programs to remove this blooming annoying virus program NON found it Googled how to get rid of it and found you guys.Altered date by one week/rebooted its GONE……>>>>>>>>>>>>>>>>>

      Don,t know if its done any damage or not had it for 3 days luckily could get on internet via pc user not registered as a administrator.

      Thank you you have saved me hours and money!

    109. RAT: I would still scan PC with antivirus and update antivirus programs. These things go and come back on unprotected PCs.

    112. So The registration code worked but i can’t seem to remove it yet. Can someone tell me how? I can use the internet though but its still there…

    113. Just fixed this problem by starting up in safe mode killing the random process in the Task Killer which amazingly doesn’t restart itself like most viruses do. Then just go to temp files and delete all of them also do the app data folder and make sure you delete the .exe file. This takes care of the virus for the most part then just restore your backup that you should already have if you know anything about computers. And your fixed just afterward start up you favorite anti-virus and run a full scan.

    114. Hi Guys,

      Thank you so much for this wonderful post. The changing date thing helped and I also used MalwareBytes to clean up. I was so pissed and depressed with the Win 7 shi*! Im sure it arrived from Facebook. Everytime I login to facebook all those ads and popups kill me!! I use kaspersky protection but still this thing happened! Anyways it looks ok now and I am running a full scan with kaspersky. Just wanna thank you again for this. I googled from my room-mate’s system which helped me find this post else who knows I would have ended up paying money for that $#%#%#%#&**.

      Its become so unsafe nowadays u just don’t know what to do!
      Anyways Take care and Gud luck ppl!

    115. hey man thankyou very much the fake key gen did work . then from there it was all downhill for that stupid virus or antivirus .

    117. Well the date thing worked but now all of my executables are gone. I can’t launch anything. Running a restore now. Fingers crossed

    120. All I had to do was go to > start > type ‘taskmgr’ (but don’t click ok or enter…just wait for it to appear > right click on taskmgr.exe and runas administrator > close ‘Action Center’ under applications > click processes > look for something like dhm.exe or some really odd named exe then click end. (you can find the exact file name by looking in C:\Users\{you name}\AppData\Local and look for a strangly named exe file and that should be it.) after you end this process, then delete the strange exe file. That will be good enough to open a browser now and download a better antivirus progrom. Try avast, it’s free and works.

    121. This is the second time my computer has been infected with a virus like this. I honestly have no idea how it got on…but it seemed to start with that s*** going around on facebook. Thank you so much for this article it really did help 🙂 now…though, how do I keep my system from being infected AGAIN. I purchased McAfee, but that didn’t keep either of the infections off. And then it said that it quarantined a Trojan or two and not to worry… and a day later there’s this. Every time. What’s going on??? TT_TT

    122. I used one of the codes and it worked! I was able to use the computer again and get rid of this nuisance. THANK YOU SO MUCH!!!

    123. All 5 of my web browser were blocked and my firewall was unable to keep on. This number worked for me within a matter of minutes 3425-814615-3990 just type it in where you register it and it will remove itself. I’m still going to download spyware dr as well.

    124. First it tried to overide my virus protection (M SEcurity Essentials). I right-clicked on the MSSE icon in programs and clicked on “open as administrator,” ran a quick scan, then a system restore. All gone!

    126. I used the serial number u provided and it worked .. its no longer blocking everything i do .. bu the program its self is still there .. can you please help me remove it permanently ..

    127. I got the Win 7 2012 version on my computer someone and it would not let me access my own antivirus software through shortcuts. It also wouldnt let me access the internet, so I did a system restore. I don’t see Win7 but does that mean it’s gone. Would a system restore get rid of it or could it still be hiding somewhere on my computer???

    128. Wow thank you i swear you saved my Pc. 2 days with this bullshit virus and microsoft couldnt even help. I was close to giving up but the last serial did it for me =)

    129. After I enter the registration code, my laptop screen go black. All I can see is the mouse moving. Nothing else. What should I do?

    131. Thank you so much! I used the fake registration code and now my computer is back to normal. Thank goodness I found this page. Thanks again 🙂

    133. I loaded free malwarebytes onto computer from flash drive, couldn’t install, changed date, restarted, and was able to install and run malwarebytes scan. Then we watched Win 7 die.

    134. Just got this virus 12.10.2011 @ 5pm PDT. Had to utilize separate computer to find a means to get rid of virus. Will try the provided steps and feedback to determine if the steps are up to date 🙂

    135. I picked up the virus on Dec 10, 2011. I was unable to perform any actions on my computer without a ‘infected’ pop up. So I looked on a different computer. Discovered this site. Copied the directions, followed them. I had disconnected my PC from the internet in an effort to protect any data mined by the virus. When I went to register, none of the codes were valid. So I connected myself to the internet once again, and tried the codes. Code #3 worked. I then received a pop up window showing a ‘Removing’ Load bar. Then all the ‘viruses’ were removed. Next was an Updating Load Window/Bar. Once that completed I was able to perform actions without infection pop ups. I am currently in the process of scanning my entire computer with my AV program (which has detected the virus already). Once I have completed that I will perform additional sweeps.
      Thank you very much for providing this detailed walk thru for getting rid of the Virus.

    136. still running my Antivirus program, but the Win 7 Anti-Virus 2012 has now removed itself from my active processes. Looks like setting the clock forward and registering did the trick. Now to just put the polish down with my AV programs 🙂

    137. Using laptop to lookup the help info. Used the fake registration code but am still showing at least one infected object (malwarebytes). What else can I do? How do we delete the virus Win 7? Thanks

    139. ok thx for the help. the code worked and immediately redownloaded my mcafee to try and get rid of it. the only problem is that when i try to open anything it says i have to download/run it, but then it says ihave to pick something to open it with, then the whole thing starts again so i can’t open a thing. it also say s that nolonger have any of my micrsoft exel ,word or any of the applications. what the f happened and is happening. please help me. i have exams in afew days and i need to study!!!!

    140. egs :
      Using laptop to lookup the help info. Used the fake registration code but am still showing at least one infected object (malwarebytes). What else can I do? How do we delete the virus Win 7? Thanks

      If you followed the steps provided, it may take a little while the virus to remove itself. You say you registered it with the codes provided. Have you set your clock forward 7 days? I discovered when I did that the program went ‘dormant’ or inactive after a couple hours. Then I was able to remove it with my Antivirus program.

    142. Thank you so much for your enormous help tonight. The win7 virus showed up on our computer this evening, and your date change helped. I am getting ready to run a full scan on the computer too. Thank you again, and to everyone else with your comments, I do appreciate all the help.

    143. another huge tip to help u guys out that i ahve not seen in this thread yet: if your .exe’s are not working, for example if u cannot open internet, malwaybytes, AV, etc… just right click it and select “run as administrator’ and you will be able to open the program. HUGE help for me, i just experimented and found it 🙂

    144. My laptop got this virus tonight, I can’t log onto any of my accounts because my cursor doesn’t appear for me to click on anything. I have no idea what to do.. can anyone help me? =\

    145. ***UPDATE***

      Mission is successful. This is what I did. To get into my browser I right click my browser icon, click run as administrator. Downloaded Malwarebytes, ran a quick scan which picked up 6 bugs, got rid of them successfully. Rebooted. Ran full system scan and found 2 more bugs. Successfully got rid of those, rebooted. Downloaded the File Extension Restore pack from http://www.sevenforums.com/tutorials/19449-default-file-type-associations-restore.html and ran the .reg file to re-write the defualt windows registry string in order to execute .exe files. After .reg file was added to the registry everything works just like normal now. I am able to run every program just fine. Seems like it did a number on my AV program (Eset NOD 64bit) it keeps crashing so i am going to uninstall and reinstall, then run a virus scan as well. I hope i got rid of every trace of this thing that existed, dont want it popping its head out at me sometime again. Just to confirm, i NEVER had to reset the date/time, so if anyone is not able to access day and time and doesnt want to mess with BIOS settings.. this is another way to get around this nasty worm. Thanks again for all your guys help!

    146. Finally got into my computer and got malwarebytes. It removed 6 infections that it found and now none of my .exe files are working?

    148. need help bad. tried hard reboot and now all i have is a black screen. windows logo comes up and acts like it wants to load but then goes to black screen. what do i do now??????

    150. @Katie

      Katie, right click on the program you are trying to open and select open as administrator, the Virus is causing programs to halt.

    151. This virus keeps coming back. I’ve got Malwarebytes and MS Security Essentials installed but it comes back after less than a day. What do I need to do to get it off forever.

    152. Karen Johnson: Get a better antivirus or anti-malware program with real time protection. While MSE is good for a freebie, I would recommend Kaspersky Internet Security or ESET smart security for real time protection. Or get full Spyware Doctor/ Malwarebytes together with MSE.

    154. i did everything but i cant seem to delete win 7 antivirus. i am also looking at the taskmgr to manually remove but i dont know exactly what to look for. can someon help plzzzzzzzzzz… thank you in advance

    155. i got rid of the virus by putting in a key i found online. but when i restart my computer my screen is all black. Can someone help me!!!

    157. hizmrz08
      Look for 3-letter name running under your user account first. If you can’t determine, scan with spyware doctor, it should identify malware process and file location for you.

    158. omg thank you so much you saved my pc ive had 3ppl look at it and look at me like what lol thank you so much my computer is up and working again:)

    161. Thanks!!! Set the date one week ahead, but could not run any .exe files. Ran a system restore as admin, scanned twice for malware and everything was back to normal! Thanks again!

    162. Hi, I received the virus after immediately turning on my laptop. I changed the date 7 days ahead and then went into safe mode and networking. I downloaded malwarebytes and it took the virus off…so I thought. After removing the files that were detected I restarted my computer and I tried to go into the internet and other files such as Microsoft word and it will not start anything. All it keeps saying is to choose a program to run the program on. Well it still doesn’t work my computer seems to now be destroyed. I contacted the PC supporters and they don’t know what they are doing. I need my computer!

    163. ok i typed in the key given above and the virus is gone. now when i log onto my computer my screen is all black. I put it in safe mode and use the malware anti virus scan and every time i do a scan 4 viruses show up and it the same 4. please someone help me out

    164. I started my system in safe mode (because the virus wouldn’t let me do ANYTHING), ran a system restore and everything seems okay. I’m running a scan now.

    165. This is crazy..!
      Windows 7 (64), IE9 with Microsoft Security Essential & Spybot (Real-time, etc.)

      I was visiting some links from a google search, but never downloaded anything and all of a sudden had the Windows 7 AntiVirus 2012 pop-ups, etc. I was able to search for cures including MalwareBytes, etc. and eventually nothing was left to be found, but IE 9 is dead… it will not load and Microsoft answer desk Techs are not being able to respond to me thru Chrome, so I’m SOL at the moment.

      If you would be so kind, How can I fix Internet Explorer?

    167. Cooper : personally, I do not use Spybot S&D as i find its scanning algorithm inefficient (my personal opinion here) and update speed lacking. There are better choices. MSE is good antivirus for a freebie. And no tool is 100%.
      Read our guide. First, disable win 7 anti-virus with the code. Then scan with other anti-malware programs of your choice and delete the files either manually or automatically.
      Consider getting Kaspersky Internet Security or Eset Smart security. They are better than MSE.

    169. Thank you.. so, so much. The internet is lucky to have websites like these and people who are willing to publish a site that helps people like me. I do school from my computer and I was so scared that I was shaking. The stupid virus actually worked at making me believe that all of those alerts were real. I am very lucky to have visited this site before I did anything really stupid.

      Thank you!!
      Sincerely, Stephen

    171. You want to beat this thing easy, follow the steps on this website. The weakness of this virus though that no one has figured out yet is that you can run taskmgr.exe by right clicking and select “Run as Administrator”. That overrides the BS it does to your reg key .exe file. Then shut down the rogue stuff and delete away. People with virus creation, knock it off!!!!

    172. I see this as a personal attack.

      Please tell me exactly where I can find the people who attacked me. I would like justice as I see it. I would not like to purchase the product, if I have to I will.

    173. Dude, I love you. I was right about to restore my pc but then I found this and you freakin helped me so much. I hate hackers so much and wish that they would mind their own business. Thank you soooo much 🙂

    175. Oh my god. This website and all the comments saved me. Thank you so much. Used the fake code 3990 and then ran malewarebytes.

    177. Computer just started showing this infection. Another adventure in the viruses I get. I swear what goes through th emind of people who do things like this? I ran malware bytes through as administrator. It wouldn’t let me ruin any other way so hopefully it catches whatever it is and gets rid of any infections. I haven’t tried any of the tips like changing the clock yet since I was able to run malware bytes. I hope it works I’m looking up all this info through my tablet.

    178. Can someone help, had problem restarted now windows cannot start… And it keeps taking me to repair windows.

    179. Running the computer in safe mode then updated my malwarebytes. Ran it, and it found and took care of the virus. Restarted again and ran malwarebytes one more time. All of it seems to be gone and comp running smoothly once more.

    180. ive had this problem off and on for a few weeks now. I tried malware bytes/avast full scan/boot scan,ccleaner to fix the weird .exe problem, and manually deleted the files and they continue to come back every few days after being removed.My utitilies are all free versions, but have been updated fully.Any suggestions on how to get rid of this guy permanently?

    181. The date trick with malware worked. If you are unable to launch any programs, try running them as administrator.

      Avast! failed to detect this virus. Im in the search for a new AV now!

      Thanks! with SWTOR releasing next week I was about to cry!!!!

    182. My computer was just infected with this. The User Controls account prompted me to accept something and I thought I didn’t click on anything, but I said Yes anyway. SO this thing pops up and tells me I am infected it won’t let me open anything to fix it. MS DOS, antivirus software, mozilla. It changed my default internet to Explorer. Anyway, I opened System Restore as an Administrator and restored to a point right before I was infected which a happened to be 45 minutes prior.

    183. I originally got this malware on Dec 13 and thought my Kaspersky Antivirus took care of it. Then two days ago I started getting those popups and my Kaspersky alerted me. It seems to have reared its head the same time my Java kicked in so it must have been tied to that somehow. I’ll have to update Java and Firefox now.

      Anyway, my Kaspersky said he deleted the trojan but apparently it didn’t work. I then used Malwarebytes (it deleted 4 files), Kaspersky Virus Removal tool (it removed 2 files), Microsoft Security Essentials, and Kaspersky TDSS Killer. I also scanned online using ESET once all these AV scans came back clean just to be sure. I don’t know if I went overboard here or not but I’m new to this.

      As of now I’m not getting any popups. It seems my IE has gone back to default settings (asking if I want to turn on Google Toolbar – which I have now uninstalled just in case – and asking if I want it as the default browser). Firefox is asking my the same thing so it must have reset, though it’s kept my private data/cookies – though I now deleted it manually.

      *However here is my issue.* I followed the idea some others above had about going to the toolbar under Customize to see what the malware name was (mine was uxa.exe Win 7 Antivirus 2012). I have deleted all the malware as all of the scans I previously mentioned have come back clean numerous times after being run all in Safe Mode. I ran Malwarebytes just now in normal mode and it’s still clean. However, I still have Win 7 Antivirus listed under the notifications on the toolbar ‘customize’ page. Should I be concerned? Does this mean I didn’t delete all the virus files?

      After all these AV scanners have come back clean, should I still go back to a restore point before the malware hit me? Or will that undo all the work I did with these AV programs?

      Any help would be GREATLY appreciated!

    184. I am in safe mode but even running malwarebytes as admin I can’t update. Also now that I have the reg key the virus won’t pop up the fake scanner screen. What process should I look for in task manager to remove?

    187. LH. If you deleted anti-malware, and the program is not active, run regedit and delete mentions of that executable or this malware). I would say your PC is cleaned.

    189. Thanks admin. I was in safe mode with networking. Dl’d rkill and fixncr.reg and I was finally able to download a new version of malwarebytes. It is running scan now.

    191. ok, malwarebytes removed the infections. thanks for the tips here, though i must heartily recommend downloading rkill and fixncr.reg before updating and running malwarebytes

    193. I put in the fake product key, changed the date, and tried scanning with many different antivirus programs but they all require me to get the full version of the project to remove the virus.

    194. BunnyPro Delete detected files manually if you wish. Full versions of the anti-virus or anti-malware programs would protect from reinfection in the future.

    195. admin :
      LH. If you deleted anti-malware, and the program is not active, run regedit and delete mentions of that executable or this malware). I would say your PC is cleaned.

      And what do you mean ‘deleted anti-malware’? You mean I should uninstall malwarebytes?

      Does anyone know if I can run Kaspersky antivirus along with MS Security Essentials?

    199. I got the dreaded Win7 Antivirus.I was frustrated to realize i had it.However thanks to being able to get online right after a re boot for a second.I found this site & another about the fake antivirus.I did a system restore and changed the Date 7 days forward and haven’t had any problems but it has only been 1 hour,however i couldn’t got 10 secs without a pop up or the antivirus telling me about BS.Thanks for the help to everyone.

      It is terrible when people create stuff to try and still other peoples money.

      P.S. I am glad i don’t have a CC cause i was so frustrated i was thinking of buying their crap LOL(Not really funny and sorry for the ones that actually bought and hopefully you can settle the problem).

      Again thanks for the help and here’s to everyone getting the CPU back to proper condition.

    200. K well 2 hours after the date change.It closed my browser and pop ups happened again so i entered the the last reg key on the list(one Starting with 3425 remember don’t add the -).Then it was removed,updated and showing virus as protecting and using the Firewall,am i suppose to delete this virus protection?If so how.Thanks

    202. I entered the key and it worked,it hasnt deleted itself but I can go online,but everytime I try and download malwarebytes nothing happens,what do I do?

    204. @ben
      What you guys need is ComboFix from bleeping computer’s website (don’t get it from anywhere else). Run it from safe mode and make sure all other antivirus software is disabled (as best you can). Your problems will be solved. Then do a just-in-case scan with something like spybot search and destroy, just to be safe.

    205. admin :
      LH: It should be “deleted malware”.
      You can not run both Kaspersky and MSE, it is not advisable.

      CAn I leave MSE on but disable the real time protection?

      Using regedit, I used the ‘find’ function and searched for uxa. I found it mentioned under ‘classes’ in a few folders but I don’t know if I should delete these or not. Do I run the risk of ruining my pc?

    207. Luticus:
      Combofix should be used by IT professionals only, or under their supervision. As far as I know, its author does not claim anything else. It will not replace antivirus or anti-malware program. We do not recommend to use it BEFORE several anti-malware program fails for such easily removable malware like Win 7 Antivirus.

    209. @admin

      Ok I’m working on the regedit now. I’m so lost though. I used the ‘find’ function and looked for uxa.exe which was connected to the Win 7 malware on my pc. I found it listed under a few folders:

      HKEY_Classes_Root2M\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\2WK\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\3j\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\45\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\4K\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\5ll\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\5U\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\8w\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\C4\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\C5W\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\ei\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\FKL\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\gA1\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\H6s\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\Hb0\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\ho\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\i63\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\j1\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\JO\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\L40\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\m1V\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\Mje\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\Qp\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\T0b\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\T4\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\Tvv\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\w2Y\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      HKEY_Classes_Root\Wp\shell\open\command\(default) = “C:\Users\[myname]\AppData\local\uxa.exe -a “%1” %*

      Do I delete all of these? They are also mentioned again under HKEY_CurrentUser. Do I delete those too? Then I found a file HKEY_LOCAL_MACHINE\components\deriveddata\versionedindex\6.1.7601.17592 (win7sp1.gdr.110408-1631)\componentfamilies\amd64.microsoft.background.management.module_31bf3856ad364e35_none_ee96eb97f6e512e8\f256!bitstrander.format.ps1xm_931cb623ebd00db In that folder is a file that starts with uxa called “uxaUoH1zR0g5oatE3hWhZoHsxpADocRHdDtIZufB9aw=”. Is that supposed to be there?

      Do I go back under a system restore point? Will that fix the registry?

      Where do I go from here to make sure my system is totally clean?

      THANK YOU SO MUCH FOR YOUR ASSISTANCE!!!

    211. I think this might have worked. Date didn’t. Only the last code did. Scanning now. If this worked, you saved my christmas

    213. I was able to get rid of the virus though for some reason I can’t access the internet (if I go to a website I get a white page with no content). I know the connection is fine since I connected the internet to my laptop and it works fine. Any help would be appreciated.

    214. My computer was infected yesterday,and I entered one of the codes and it seemed to work so right after that I ran my antivirus and it told me to reboot the system so I did. When my system came back on the virus showed back up. Then I shut it down and and entered safe mode however when I went into safe mode the virus showed up in safe mode. Do you have any suggestions on what to do now?

    215. Thanks for the help all. I was able to remove malicious file by changing date and running malwarebytes. Changed date back and Sofar so good.

    216. I did the date change and the pop ups are gone, but it is still inhibiting my McAfee and all my .exe files are dead. Help!

    220. The last code worked for me. Made the stupid spyware happy for a moment. Now I just need to figure what to get to completely remove this thing from my computer. Why can’t the police or government trace this spyware and catch these heartless mo fos’.

    221. OMG WHO EVER THOUGHT OF THIS??.. I CNT THNK U ENOUGH!!! I ALMST GT FOOLD AND PAYED FOR IT… GEEZ THANK U SOOO MUCH FOR YOUR HELP!!

    222. I’m decently savvy with computers, but no whiz when it comes to the real techie stuff. Is this something I can do myself or should I have someone help me out? I googled some info on how to do it and I’m not sure if I should try given my limited knowledge base. What do you advise? Thanks. @admin

    225. admin :
      LH yes:

      Yes…delete the files from the registry?

      Yes…go to an earlier restore point?

      Both?

      Please be specific. I’m a total novice here. It seems that the malwarebyes, kaspersky, and MSE cleared it up but those uxa.exe files being in the registry (although not under any of the files you listed in the article) has me confused as to whether or not this issue is fixed. I’m worried all my college files are now infected or something.

    227. admin :
      LH : I would do registry key deletion. Both ways would achieve the same under ideal conditions.

      ok so i just go in and delete those individual files? after that do i have to replace the exe registry like those other people who can’t open their exe programs? right now my programs run but idk what deleting these files will do. if so, how do i remedy that?

    228. My laptop was infected with this virus and I set the date ahead which then let me get to the internet. I tried to download Malwarebytes, but it would never install. Now my screen is totally black with only the mouse arrow showing. Even when I bring it up in Safe Mode with Networking, the screen is black with just the white arrow. What can I try now? I really just want my pictures off of the hard drive!

    229. Thanks so much for the tips on how to get rid of this POS. I was fooled into buying it a year ago when it totally locked down my computer. It happened again this morning and thought I was going to have to do it again or take it to a repair place. I use Kaspersky protection and wish it had caught it. I tried the time change but that didnt work. I then tried the manual registration and used the current code (the one from 11/29/11) and it worked. The first one said was invalid. Amazing what people will do to scam others. Thanks for not making me be an idiot again and give them my money.

    231. How I Removed Win 7 Antispyware 2012

      First, this POS infects the affected user account only. I always have 2 admin accounts on my computer to resolve problems. Win 7 Antispyware 2012 infected my “regular” admin account. I rebooted my PC and logged in using the backup admin account. This account worked fine and was not infected.
      Using the backup admin account, I opened REGEDIT. I went to HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
      My default key read HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = ‘”%LocalAppData%\gsy.exe” -a “%1” %*’
      The executable, GSY.EXE, was the file causing all of the damage. Your file may be something else like KDN.EXE. Whatever it is, delete this file. Open Windows Explorer and delete this file. I deleted GSY.EXE.

      Download the .EXE Registry Fix
      Using my backup admin account, I downloaded http://www.sevenforums.com/attachments/tutorials/123734d1312706455-default-file-type-associations-restore-default_exe.reg and I saved the file to c:\temp

      Run the .EXE Registry Fix
      Now, the infected profile’s registry is screwed up and your PC will not run any .EXE files. To fix it, login to your infected profile using Safe Mode (http://windows.microsoft.com/en-US/windows7/Start-your-computer-in-safe-mode)
      1. Choose Safe Mode with Command Prompt
      2. From the command prompt, type: start explorer
      3. Go to c:\temp and right click the .REG file you downloaded above.
      4. Click Merge
      5. Reboot your PC

      These steps worked for me. It removed Win 7 Antispyware 2012 from Windows 7 64-bit.

    232. I have the same problem as PBS after installing Malware bytes. I used the latest code and stopped the unlock temporarily but the malware persists, so I read the above comments and download and installed Malwarebyes, after a quick scan it picked up 3 objects, I removed it, restarted computer and now the screen is BLACK.

      Help me what should I do?

      It’s my work laptop I have to get it fixed asap

    233. admin :
      PB: Burn alternate os scanner and scan with it.

      I have the same problem as PB what do you mean by burn alternate OS and scan it?

    234. Mark: It is advisable to use non-admin account for daily tasks. additionally, you might be able to create other user account (even admin one) which is uninfected even when PC is infected. However, It is very important to do full system scan with couple anti-malware programs, as some trojans might be installed system-wide.

    236. I have tried everything on here (mark – logging in on the infected account does NOT help because you cannot run regedit even in safe mode) and I still cannot correct the exe file association problem.

      I think it is pretty poor that MS cannot provide a fix for this association. It is apparent that these people have found yet another flaw in the MS system.

      Has anybody actually had the exe issue and corrected it?

    237. Thanks for the site.

      I tried the date thing first and it did not work. Putting in the 3rd registry key did the trick. It uninstalled and then wanted to do a scan. I selected the ‘red-x’ in the upper right corner to close the request to do the scan.

      I then downloaded malwarebytes and ran the scan. It’s all good now. Bravo to the author of this fix.

    238. i got this win 7 antivirus 2012 just an hour ago. I knew it was a fake one… so I did system restore right away…. and it worked. The question is: Is it gone for good?

    239. Bob mag : downlaod and run .reg files with exe file fix. They will pass through malware. However, you will have to delete malware files as well, or it will reinfecte registry..

    241. i tried the date change it worked for a moment but failed…. but what i did that worked was just do a “system restore” that was set for two days before the virus… it worked and now i am happy

    242. Hi there, I first got this virus on the 10th. It was removed and Webroot antivirus was installed. I already had malwarebytes.

      So last night I got the virus again WITH Webroot AND Malwarebytes. How is this possible?

    243. My non admin user account got infected. I deleted the account while carefully selected the option to NOT delete files. Created a new account. Old files are preserved.
      It works if you dont have a better solution.
      Run a full scan later.

    244. Hi there, re above and the original guide for changing clock, using last registration code, malware etc….I did this to the letter and it worked really well, deleting cookies and trojan viruses.
      However, 3 days later it started to go a bit weird when trying to go in internet explorer…asking how I would like to run this program..then it comes up with internet explorer and browse options…however, it then continually goes back to the original box, after asking whether you would like to “run”, “save” or “cancel” the download….what download, I am only trying to access the internet???

      Now, even when I try to access something as simple as the calculator on my computer, that stupid download box comes up, again and again…

      It is driving me nuts and I cannot do ANYTHING at all on my computer!!!

      Does anybody have any ideas????

    245. I’ve had to deal with this virus a few times. Mainly, because my sister always find a way to get infected by it from websites that use external ad-servers. Regardless of the current virus scanners installed..

      The virus stops you from running Task Manager any other program, so people with little computer knownledge will be trapped.

      Going to (Task Manager) C:\Windows\system32\taskmgr.exe and running it AS administrator should allow you to open it so you can forced shutdown the virus.

      You should then go to (System Restore) C:\Windows\system32\rstrui.exe and run that AS administrator and restore your system to a date before you were infected.

      Running as admin allows you to open the programs as the virus changes reg values causing extentions such as .exe to not function.

    249. I just did a system restore to like a week back worked like a charm. I have windows 7 on my toshiba.

    250. Hello,I have got this same program called “Win 7 Anti Virus”I was on my buddy’s
      Laptop and i turned it off and turned it on and It had gotten Win 7 Anti Virus and I was Like Whats this?So I told him and turned it off.I went to my house and turned on my PC And i had got the same thing!So I had a disk that fixed it.Once it was fixed I could use it Again ,but 2 weeks later THE SAMN THING IS BACK ON MY PC!Im trying to get it off for ever!Can someone help me!
      -Patrick,The computer Geek

    251. so im in my teenage years…yea and i happened to get this stupid thing and i entered a fake name and fake everything, and then i put in the credit card numbers…you know the : 3425-814615-3990 and 2233-298080 and 1147-175591-6550 but non of them work instead it says “eneter a sixteen digit card number” and all those numbers have 14 numbers what am i supposed to do?!?!?

    252. pls. help. i’m panicking.my laptop got this virus today and I don’t know what to do!! I have Kaspersky & it’s saying my laptop is protected!. i tried changing the date, but it won’t allow me to do system restore. can’t access IE either. pls h-e-lp!!!

    253. and also, can you pls do a step-by-step instruction as I am not really a computer savvy. i appreciate all your help. thank you!

    256. hello again, thanks so much for this forum. really helpful. the CODE w/ 3990 did the trick for me. i’m now running malwarebytes scan. I hope everybody will have their computer fixed soon. and i hope we’ll get rid of this bug totally & stop pestering peoples lives.

    258. I deleted the virus with malware bytes I even did system restore point that worked against this virus for me but now it won’t work witch I’m fine with but I don’t have any Internet connection! Even with the anti virus gone any help please, I mean my dads computer’s Internet is fine that fake anti virus did something I cant go On the internet at all I even did safe mode with networking my browser works though btw so I don’t think that is the problem any way thanks! Please Help me.

    259. Patrick
      Scan with some anti-malware program to check for hidden trojans, scan with hitman pro as well. No antivirus is 100% and you might have hidden trojan.

    260. I’m dealing with this bug right now with SpyDoctor. What’s the most common method of getting this?? And how come the antivirus software companies haven’t gotten a handle on it by now?

    263. @admin
      Well i have a recovery disk that i ahve it wont work its blocked and i downloaded that disk to my P but then it block it too and i cant go to the internet so how can i download Malware do i go to safe mode with network

    264. Dear Admin,
      Thank you so much for this website. The clock thing didn’t work , but the third code did and I truly appreciate it. This allowed me to download my antivirus program so I can scan it properly! You are a life saver.

    265. Collette,
      Same thing happened to the PC that I cleaned up today. The user didn’t have a password on their profile. It seems that this thing gets really nasty and messes with all of the executable locations. I had to create a new user. Then reinstall anti-virus software (I recommend AVG Free). Then I deleted the old user account. Make sure you say yes to saving user information when prompted for pictures, video’s, etc. Make sure you always create a log in password.

      Darren,
      Don’t try to buy the software. Click the activate button and use the codes in the article above. Make sure to include the dashes. Good luck all.

    266. Admin, i was able to use the key and the win7 virus dont show up anymore but i cant get internet access. I saw you comment about getting hitpro, i tried to download it from another computer to flash drive but it wont do that. Please what can i do to get internet access back?

    267. I eventually get the Emsisoft worked from flash drive and used it to clean the viruses on my laptop but i still cant connect to internet. Please help anyone. I still have limited internet access.

    269. Tayo :
      Admin, i was able to use the key and the win7 virus dont show up anymore but i cant get internet access. I saw you comment about getting hitpro, i tried to download it from another computer to flash drive but it wont do that. Please what can i do to get internet access back?

      But, hit pro is just a scanner it won’t bring ur Internet back, any way admin do you think or know how to solve this Internet acess thing I researched and found nothing to help me, I think this virus has something on its hands.

    270. My windows lost internet connection due to this win 7 infection so I am not able to download any antivir softward. also my system restor corrupted by this virus.please help what to do?

    271. Larry: You have to kill malware process. In most cases this enables internet connection. If it does not, use alternate os scanners or move anti-malware program installs using flash drive

    273. admin, i downloaded anti-malware and installed it on my laptop, still no internet. I ran the antimalware, deleted some detected virus. When i restarted the computer, the Avast that i have on it popped up that there is an error from loading, error 10050. What can i do after that?

    274. @admin I encountered the wwin 7 antivirus, I have spyware doctor and have ran it numerous times. I’m sure the vvirus is about go.e, but i ccannot access anything, when I try tto right click and the screen resolution or personalize, explorer.exe doesn’t work, I get application errors for about all internet tools, it asks me to search for items (such as safari and Mozilla firefox) before i wwas able to get on safemode with networking to get online, but now it keeps restarting my computer when I choose it. I am forced to use my phone. Again my exe files will not work. I’ve tried to get registry fixes but it always states that something is missing
      and it can’t run it.

    278. I ran the Sevenforums link registry fix, and my computer says that it is successful. I rebooted my computer, and yet, when i right click my desktop and go to personalize it states (Explorer.EXE : Server execution failed). Still when i try to open up Safari it states (Safari.exe – Application Error: The application was unable to start correctly (0xc0000142). Click OK to close the application.

      Any suggestions?

    279. Jacob: It might be messed up registry or deleted important system file. Try scanning with registry cleaners, like CCleaner, or PC support time. like +1 888 557 8172

    280. Tayo:
      Reinstal Avast. Prior that, run TDSS Killer or some other anti-rootkit application to see if there are not hidden “surprises”.

    283. I got this virus today and I added the code and it allowed me to access the internet and everything again. It’s still on my computer though. I’m about to download Malwarebytes and see how it does. What is strange is that I had Kaspersky Antivirus on the whole time and it just slid past it like it was nothing. I thought the antivirus had a good reputation?

    284. Changed date to 7 days, revolted, rescanned. Deleted all but 1 .exe which I deleted in Task Mastwt. Worked.

    285. Thank you much for posting that serial, it worked like a charm and removed the software automagically 🙂

    290. Admin, thx for the advice on this site. I fixed a computer with this virus/spyware on it after they had taken the computer to several computer fix-it locations and they told the owner that it would have to have the hard drive wiped and reinstalled. I saved all information on the computer and got rid of the bug. For all those out there, Malwarebytes gets this bug off your computer and it’s FREE.

    291. if you want you can boot your computer in safe mode by pressing F8 when the computer boots and then get the virus off. if you boot in safe mode the virus wont start. just a thought

    293. Thank you! I put the last code you listed and it worked! FYI the first code did not work.

    294. Thank you so much. This the second time I have used your website to find out how to remove a malware program. FYI – The third code worked for me. You are providing an invaluable service. Thanks again. Ayesha.

    296. I succeeded to remove “Win 7 Antivirus 2012” for Windows 7, doing this:
      Restart your computer,
      Keep pressing F8, go to SAFE MODE,
      Go to START bottom, In “Search Program” digit RUN, digit MSCONFIG,
      In “System Configuration” go to tab TOOL, look for the last item called “SYSTEM RESTORE” and launch it for a date before the infection. That is it. Worked for me.

    299. There are enough instructions here that I don’t need to repeat anything; in my case, all I did was Run as Admin on MBAM, and everything was OK after a reboot (no black screen, no missing .exe reg. association, no hidden files, etc.) That said, I think it’s worth mentioning a few other precautions:

      In every case I’ve seen this tool creep in (at least 2-3 times), out-of-date Java (not JavaScript) was the culprit. I recently got hit on a machine where I normally use Chrome (which disables Java by default), but instead used FireFox (which had Java enabled).

      (assumes Win7):

      * Run C:\Program Files (x86)\Java\jre6\bin\javacpl.exe *AS ADMIN* (or the Update tab will not appear), and apply the latest Java update.
      * Add/remove programs, and always remove all Java Updates except the most recent.
      * Within FireFox and/or IE, go to Tools|Add-Ins (or Extensions) and disable all Java extensions from running within the browser.

      Even after removal by MBAM, this ugly trojan leaves a few viral Java class files behind, so use your AV program of choice w/ latest sigs. and do a full scan (including archives) to get rid of rogue Java classes.

      And (let’s be honest), if you’re doing any type of surfing known to be notorious for viruses, etc. (read:porn), consider running a virtualized browser. If you happen to have a spare/old copy of Windows XP, Vista, etc., you can always create a small “sandbox” OS using Oracle’s VirtualBox (free), and use that OS to surf. Should a virus strike, revert the image back to factory in a few seconds, and you’re good-to-go once again. (While viruses/trojans that pass the VM boundary are in theory possible, they’re not commonplace by any means).

    300. CWE:
      Java is used to infect the PC. Typically, there are multiple vulnerabilities used to infect the PC and it is not always possible to list them all, thus we recommend running couple of scans with different programs after removing this malware.
      From personal opinion (I use chrome myself), a good internet security suite or good anti-malware program is the best way to protect PC. Some infections are not web based 🙂

    301. I’m being attack by this virus now. I couldn’t change the date too. The window showing change date setting has already pop up, but it get stuck. I don’t know what to do. Will my document be affected (lost)? Coz as I click on it, the win7 antivirus window will show up! Please help me! I hope my files are all safe

    302. @jonathan
      are you sure its ironcache?I found an iconcache
      Also the stupid virus blocks the system restore, and the program provided is asking for money which I am broke. What other options are there?

    303. I got this virus twice on my laptop. This last time over the weekend, I finally was able to get Malwarebytes to run, and it found 2 instances of the virus. I rebooted and ran the scan again (it never allowed me to update MWB on the internet), it found 0 viruses. I rebooted and lost all .exe on all programs. I decided to take it to Staples for a diagnostics and removal, and I just got a call from them stating their diagnostics found I am losing my harddrive.

      My questions is…Does this Win7 antivirus program mimic losing a harddrive as well? I haven’t picked up my laptop yet to look at the diagnostic test they ran but in the meantime, I was curious after reading all this whether or not this little devil would cause a harddrive problem. My laptop is just 2 years old and a Dell, which I’m sure means absolutely nothing except $$ to me… 🙂

    304. I’ve had this garbage on my computers a couple times before, I always just used system restore and poof it was gone

    305. Thanks for this posting
      Thanks for trying to post steps to remove it.

      But I can tell you from dealing with this as the IT person at my job.
      You need to back up your data, and re-image the drive.
      THis is russian hacker spyware, it also puts a root kit on your PC.
      You MUST RE-IMAGE, whatever you do, make sure the C drive gets wiped.
      AFTER YOU HAVE BACKED UP YOUR DATA.

      Dont bother with trying to get it removed, none of the big ones work.
      SUPER, MaleWareBytes, Microsoft Security Essentials. KasperskyAV
      none of those listed were able to remove it, or even see it.

      Just back up your data, and re-image the drive.
      I dont know how they are doing it, but their pretty good at it.

    306. JohnPA2006
      Actually, you (or your IT guy) is incorrect – removal for this parasite works. Sure, it is a bit more complex than downloading one remover, running it and cleaning infection in some cases, but this is not the most difficult to remove threat and it does not comes with rootkits always.
      There are nastier versions where reimaging is the only opinion.

    307. Carol : no, it does not. Maybe your hard drive was failing, such things happen. I think support would recognize difference between real hard drive failure and fake system optimization utilities that mimic that failure (there are such parasites, though different).

    308. @JohnPA2006

      I also am a PC Tech, and Restoring the PC is ALWAYS the last resort. There are not many Viruses I’ve seen that require you to Reformat. That’s just the long, but easy way out.

      A new one that’s been popping up that I’m seeing though is a Virus that creates a tiny partition and will replicate no matter what. (Unless you delete the small hidden partition)

      I do work for a huge PC repair company, I pretty much see it all. (And can remove it as well 😛 )

    309. Thanks admin, i did everything you and CWE said….i still cant get internet access. The firewall wont allow me to do anything. On firewall, i have this: Windows firewall is not using the recommended settings to protect your computer.

      I tried to restore, it wont work either.

    310. i tried to download spdoc.exe. and could download it. but everytime i tried to run it, it won’t let me. the win7 window pop up and it stop running. what should i do??

    312. hey @Admin
      i got this virus today after my sister went online to shop some clothes, now..
      ive removed the pop-ups etc, but the win 7 antivirus is still on the taskbar on the right you know..
      ive scanned my pc with doctor, avg pro, norton and essentials..
      now, i can’t open any games, could u tell me how to remove it completely?
      (btw i dont have boot disc’s)

    313. Hi
      I have been trying to sort my laptop out for a few days now since win 7 sercurity got hold of it. I have tried a number of things like changing the date which only worked for about 5hrs then the bloody thing popped back again stopping me from doing any downloading to prevent win 7 from activating its self. But had no joy in safe mode either could not use internet explorer at all. so I opened another account on my laptop and then was able to download stopzilla which is a trial version. When I ran the program it took out 3 viruses in the new account. Then when I switched back to my original account it was running like a dream. So try it and it should work for you.

    315. dont panic. i was able to use the third serial number and it worked. i was able to run microsoft security essentials and remove it all. no threat for any information being stolen. Thanks a ton for those numbers.

    319. I just got this virus on my computer, it would not allow me to run any Ani-Virus programs or IE. I reset my computer using a previous restore point (last Windows update) & this wiped it from my computer. You can try this if none of the other options are working for you.

    320. just forgot to mention that the steps should be taken after you enter the fake registration key which will make win7 security 2012 malware think its activated which will allow you to access internet and make downloads.

    322. im 15 and havent cryed in years , but right now im sheading tears of joy ,thank you so much , my lenovo is finaly free , just thank you all so much

    323. I hate this virus. I killed this virus like 2 days ago and it came back. stupid pop ups. avg sucks

    324. Rean
      Get full version of malwarebytes, spyware doctor Or change AVG to something else. Kaspersky, ESET , maybe AVAST/Avira is good.

    325. ok so I got a computer from my school to work on online hw and I just got the Win 7 Security 2012. I cant change the date cuz only the admin can, the registration codes up there dont work. i got the process explorer and dont know wat to do. any help??

    326. I had this virus on my computer, I couldn’t open up anything on my computer, I could’nt get online to find websites like this one for others advice. But I have found that with this and other viruses like it, you can restore your computer to a earlier date. I don’t think theirs a certain number of days that you have to go back. Just my advice, I found that it works on almost every virus that gets through Norton. Good Luck to all!

    327. @jonathan
      This saved my computer. I have run skyware doctor bullshit, maleware, avg, norton, mcafee and anything else I could think of and the shit just repaired itself. I had to get to the “root” of the problem. Now, its like I have a new computer again. Thanks bro.

    331. I used the fake registration code and it allowed me to finally be able to use system restore and I was able to go and restore the date back a few weeks. Thanks so much. It was really starting to piss me off..lol

    332. Thank you for this helpfull information. It was clear and strait to the issue, so I could fix my laptop. I was googleing for several hours and with this site I fix it in 10 minutes. Thanks alot!:) Now I’m very happy that I could open my files. The only thing is that I have to start my laptop on safe mode; otherwise it does not start.

    333. You are amazing! Just want to say thank you so much for posting this info! I have had this going on for a few weeks now thinking I was going to have to take it somewhere and pay to have it looked at. Seeing this really made my day. It helped so much! Huggs & Kisses sent your way!

    334. I tried changing the date a few times and then restarting the computer, but for some reason it just didn’t seem to be working because I would quickly give up when logging back in just to find that my background was still black. However, I kept trying and decided to wait a few minutes, and suddenly all of my stuff just magically came back. Thank you, saved my life.

    335. I admit I acquired this spy ware while browsing for pornography. Shame on me. But this time, I randomly clicked on links, and THAT’s when I got it. If you were like me, this might work for you:

      1. Change the date to 7 days after infection.
      2. Fake register this Win 7 Anti-Virus with the latest code provided.
      4. (I changed my date back to normal, idk if this is necessary)
      3. Run a System Restore to a point before infection.

      After I did this, this fake program wasn’t even in my task bar and (it seems) I got rid of it totally.

      Lesson from all of this? Don’t look at pornography. It’s bad.

    337. HELP!!! I’ve removed this virus by options suggested..system restore/ Running malwarebytes. Virus got removed, but I’ve lost all the data – my pictures, school notes and many programs are not working. All folders are there but they are empty. Is there any possibility of getting those data back?

    338. God Bless You! My husbands computer got infected and was searching for a solution. Yours was the only one that worked. Thanks again!

    339. I’ve registered with the fake code it has stopped popping up, but my files aren’t showing and it still won’t open internet or other programs in normal mode. I’ve scanned with malwarebytes in safemode twice. I can’t open system restore at all either. Wtf

    342. Thank you so much for the activation key! It worked like a treat and successfully allowed me to now go on and remove it for good! I owe it to you! Thanks again x

    343. Now not only does it ask for an activation key, it wants an email address. Now what? None of the keys in this thread work. It’s hijacked everything. I moved Tue date out 7 days and still doesn’t work. I’m at a loss here.

    344. I have a question… mmmm I got the virus, but I used norton and this other antivirus webroot secure anywwhere and it apparently removed the virus because i dont get any messages that my pc is infected and i can access ie and firefox… however, something weird started to happen… when i turn on my pc, loads window and most of the time my screen goes green and my pc restarts itself. Is it because the virus is still in my pc? or something else like maintenance and cleaning my pc? help pls!

    345. iroquai82
      Keep one antivirus only. However, Scan with TDSS killer as well, as in some cases this rogue comes with rootkits that are hard to detect and might cause some problems. If couple anti-malware tools does not detect anything, run registry cleaner like CCleaner.

    346. Awesome, the second solution of giving the registration key and fooling the win 7 2012 worked for me…thanks for providing this information….after 2days of strugle, i was about to loose money in buying this win 7 2012, but glory be to God, HE made me see this. Thanks for posting such useful information.

      Keep up the good work.

      Thanks.

    347. Funny to see that so many people are getting this in the real 2012.
      I had this virus (but didn’t have the guts to post it) in june. guide worked like a charm! Thanks.

    349. Thanks, this virus just popped up out of nowhere, and I’ve deleted it successfully by deleting the registry keys you provided and the files on AppData, etc.(For me, a lot quicker than changing the date and rebooting and stuff)

      Helped a lot 🙂

    350. What is the association between McAfee and win 7. I was told by “Action Center” McAfee security was no longer working? to go to Mcafee and update or buy new version. I removed McAfee about five or six years ago.

      MS has its security….with no concern for consumers of MS software….since the days of having to insert a disk to boot a computer…. Been through all the problems of the continuing updates, upgrades….and I find my problems on my new computer…my old computer which I did not do all of this works very well.
      With Win 7….Microsoft should remember we make their railroad run…..and they have forgotten about their consumers. Greed….is a nasty word. MS is the most greedy.

    352. You are a LIFE SAVER. The date and codes didn’t work, but I tried the system restore and now my computer works great! I will NEVER download anything that is suspicious.

    353. Would all these steps work for win 7 antivirus pro 2013? Some of the codes are invalid. What do I do? Thanks in advance

    Leave a Reply

    Your email address will not be published. Required fields are marked *

    Search