Instructions for removing the fake Win 7 Anti-Spyware 2011 software

In the following article, we will dive into analyzing behavior and how to eliminate the fake Windows 7 security program Win 7 Anti-Spyware . In fact, this type of malicious code is equivalent to the variants previously known as Antivirus Live, Internet Security 2010, Cyber ​​Security . All of them have one thing in common: make users believe Absolutely, their system is infected with many different types of malware, and all they need to do is pay the anti-virus software royalties to remove all the threats from the system. . One of the factors that easily deceives users is that they often use familiar camouflage names like XP Antispyware, Win 7 Antispyware, Win 7 Internet Security 2011, Win 7 Guard, Win 7 Security, Vista Internet Security 2011 . quite similar to the real and popular security tools today.

However, the signs to identify them are also very specific. Every time our computer "unexpectedly" receives the messages, the bulletin board is in the form shown below, asking the user to proceed to scrutinize the entire system, and of course, discover lots of files. has been infected, another difference is that this scan will take place most quickly:

Instructions for removing the fake Win 7 Anti-Spyware 2011 software Picture 1

The familiar and very recognizable window of the fake security program

Besides, creating a notification window with a 99.9% interface like Windows' Action Center also makes many users' fall in love ':

Instructions for removing the fake Win 7 Anti-Spyware 2011 software Picture 2

Basic steps to take:

For the average user, this process can be quite complicated, but for those who have experience, just follow a few basic steps as follows, will overcome most situations.

- Use the Portable version of SUPERAntiSpyware application.

- If there is no result, please restart the computer in Safe mode with networking (press F8 to access Safe Mode menu).

- Continue to try again with SUPERAntiSpyware Portable.

- If you cannot access Safe Mode, use the ComboFix utility to remove malicious components in the system.

- Next, install the MalwareByte software and proceed to scan the entire system.

- After that, restart the system again and continue scanning all hard drive partitions with reputable security software, in this case we recommend everyone to use Microsoft Security Essentials.

Remove Win 7 Anti-Spyware 2011:

To proceed with this process, we will use MalwareBytes, download and copy to a USB drive, and then install it on the infected computer. It is best to restart the computer in Safe Mode and perform a full scan:

Instructions for removing the fake Win 7 Anti-Spyware 2011 software Picture 3

For special cases where users cannot install MalwareBytes , please use SUPERAntiSpyware:

Instructions for removing the fake Win 7 Anti-Spyware 2011 software Picture 4

If you are lucky, you will completely remove this malicious program from the system. And don't forget to use Microsoft Security Essentials to ensure system safety.

Cannot use any program after removing the virus:

Next is another quite common situation, that is, after removing the malicious program from the system, the user cannot open any application. Why is that?

Simply because the virus overwrites the information in the system's Registry keys, requiring Windows to activate the virus itself instead of user-side applications (files with * .exe files and shortcuts), This means that you cannot open the Registry to edit it. To fix this, the author created 1 reg file on the computer completely normal:

Instructions for removing the fake Win 7 Anti-Spyware 2011 software Picture 5

To fix the problem, you only need to download this file, copy to the infected computer, extract and run the * .reg file inside it. Good luck!