Title: Win 7 Antivirus Pro

Type: Rogue Antispyware

Remove Win 7 Antivirus Pro. Removal instructions

Also known as: Win7AntivirusPro

Severity scale:

(68 / 100)

Win 7 Antivirus Pro is a fake anti-spyware program that is promoted through the use of Trojans, browser hijackers and other similar malware. When your computer is infected with this bogus software, you will see many fake security alerts and notifications stating that your computer is infected. While running, this parasite will supposedly scan your computer and display a variety of infections that won't be removed unless you first purchase the program. The scan results are false, you can safely ignore them. The same could be said about fake system security alerts, you should ignore them too.

To make things even worse, Win 7 Antivirus Pro will hijack Internet Explorer so that you will be constantly redirected to various misleading websites that promote malicious software or display misleading online ads. The rogue application will also block security related websites and antivirus software to protect itself form being deleted. As you can see, program is nothing more but a scam. Please use the removal guide below to remove Win 7 Antivirus Pro from your PC as soon as possible.

Win 7 Antivirus Pro removal instructions:

1. Click Start->Run (or WinKey+R). Input: "command". Press Enter or click OK.
2. Type "notepad" as shown in the image below and press Enter. Notepad will open.
3. Copy and past the following text into Notepad:

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command]
[-HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

[-HKEY_CLASSES_ROOT\secfile]

4. Save file as "exefix.reg" (without quotation-marks) to your Desktop.
NOTE: choose Save as type: All files
5. Double-click to open exefix.reg. Click "Yes" for Registry Editor prompt window.
6. Download Spyware Doctor or an automatic removal tool below. Update Spyware Doctor and run a full system scan.

If you can't complete the above steps then please use another PC to download an automatic removal tool and exefix.reg (Right Click (Save Target As)) to download file. Copy these files to USB flash drive or any other external media and transfer them to infected computer. Launch exefix.reg file first and then install Spyware Doctor.

Related files: %UserProfile%\AppData\Local\av.exe, %UserProfile%\AppData\Local\WRblt8464P

Win 7 Antivirus Pro properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

Automatic Win 7 Antivirus Pro removal:

remover for Win 7 Antivirus Pro

SpyHunter is recommended remover to uninstall Win 7 Antivirus Pro. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of Win 7 Antivirus Pro and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Win 7 Antivirus Pro using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

Tested and Confirmed! STOPzilla removes Win 7 Antivirus Pro (2010-02-01 07:03:22)

Malwarebytes Anti Malware

download | review

Tested and Confirmed! Malwarebytes Anti Malware removes Win 7 Antivirus Pro (2010-02-01 07:03:22)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Win 7 Antivirus Pro (2011-04-12 09:41:42)

XoftSpySE Anti Spyware

download | review

Win 7 Antivirus Pro manual removal:

FORUM:
Discuss Win 7 Antivirus Pro in
spyware removal forum

Kill processes:
av.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"

HELP:
how to remove registry entries

Delete files:
%UserProfile%\\AppData\\Local\\av.exe %UserProfile%\\AppData\\Local\\WRblt8464P

HELP:
how to remove harmful files

Information added: 2010-02-01 07:03:22
Information updated: 2011-04-12 07:04:27

Additional resources related to Win 7 Antivirus Pro:

Attention: If you know or you have a website or page about Win 7 Antivirus Pro removal, feel free to add a link to this list: add url

more resources

Rick

This info was very helpful. This FakeAlert-SpyPro.gen.a (trojan) disabled my licensed McAfee and my internet browsers. Pretty much couldn't work in any program in regular nor safe mode. Spyware Dr installed but couldn't load. Finally got MalwareBytes to load and remove one infection. Then I was able to edit my registry. The above items were not in my registry... however instead of "av.exe" I did find "emr.exe" and deleted those lines. As soon as I deleted all instances of emr.exe from my registry, McAfee came back to life and reported it had caught and removed two varieties of the trojan virus FakeAlert.
Thanks for all the help.

Reply »

2011 04 11

Post Comment:

Attention: Use this form only if you have additional information about Win 7 Antivirus Pro parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Related discussions:

Win 7 AntiMalware 2010

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.