Tuesday, January 3, 2012

Remove Win 7 Antispyware

Win 7 Antispyware is a rouge anti-spyware program. It states that your computer is infected by virus and asks you to register the program so that you can remove such infections. In order to register it you are asked to pay the price. 
To remove Win 7 Antispyware 2012, do the steps given below:
1.       Delete Win 7 Antispyware Program Files
2.       Delete the Information stored in your Registry
3.       Download a Powerful Antivirus
4.       Reset Internet Settings

Delete Win 7 Antispyware Program Files
All the files installed by Win 7 Antispyware should be deleted permanently. Below are some locations where you can find these files and delete them manually. This will remove Antispyware 2012.
1.       Open My Computer.
2.       Open C:\Program Data. Delete the folder named U3F7PNVFNCSJK2E86ABFBJ5H.
3.       Open C:\Users\VikasM\AppData\Local. Delete the file called PPN.EXE. Delete the U3F7PNVFNCSJK2E86ABFBJ5H folder.
4.       Open C:\Users\VikasM\AppData\Local\Temp. Press Ctrl + A and then Delete key of your key board.
5.       Click Back button until root directory appears. Click F3 key. Type U3F7PNVFNCSJK2E86ABFBJ5H and press ENTER.
6.       From the search results, delete all the folders found with this name, if any.
Delete the Information Stored in your Windows Registry
The next step is to remove the registry entries made by Windows 7 Antispyware in the system registry. This is because these keys are used to store its information and make it function properly.
1.       Click Start, select Run. Type RegEdit and press ENTER.
2.       When you are prompted for administrative privileges, click Yes.
3.       Delete the following registry entries or otherwise delete them with the help of a Registry Cleaner.
a.       HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = ‘exefile’
b.      HKEY_CURRENT_USER\Software\Classes\.exe “Content Type” = ‘application/x-msdownload’
c.       HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = ‘%1? = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
d.      HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “IsolatedCommand” = ‘”%1? %*’
e.      HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “(Default)” = ‘”%1? %*’
f.        HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1? %*’
g.       HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’
h.      HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’
i.         HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1?
j.        HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
k.       HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1? %*’
l.         HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1? %*’
m.    HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “IsolatedCommand” – ‘”%1? %*’
n.      HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
o.      HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
p.      HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe”‘
q.      HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe” -safe-mode’
r.        HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Internet Explorer\iexplore.exe”‘
4.       When you are done, close Registry Editor window.
Download a Powerful Antivirus/Antispyware
In order to remove Win 7 Antispyware, download and install a good antivirus program. Scan all the partitions in your hard disk and remove infected files, if any. Be sure to update the program on a regular basis so that you’ll be able to avoid such problems in the future.
Reset Internet Settings
It is also important to revert any changes made by Win 7 Antispyware 2012 with your internet connection. Follow these guidelines:
1.       Click Internet Explorer icon on your Taskbar.
2.       Press Alt, click Tools | Internet Options.
3.       In the new dialog, click Advanced tab and then Reset button.
4.       Make Delete Personal Settings checked. Click Reset to confirm.
5.       Now click Connections tab. Click LAN Settings.
6.       Deselect the box Use a proxy server for your LAN and remove the information filled in Address and Port fields.
7.       Click OK.
8.       Restart the program.

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.