Win 7 Defender Pro. How to remove? (Uninstall guide)

removal by Ugnius Kiguolis - -   Also known as Win7 Defender Pro, Win7DefenderPro | Type: Rogue Antispyware
12

Win 7 Defender Pro is a rogue anti-spyware program that is distributed and installed through the use of Trojans and other malicious software. Usually, it comes from fake online scanners and malicious online video sites. It may also come bundled with other malware and it might be promoted on popular social networks using misleading social engineering methods. Once installed, Win 7 Defender Pro will run a fake system scan and display a list of infections that can’t be removed from your computer unless you first purchase the program. However, you shouldn’t buy it, because the scan results are false. The only real infection is Win7 Defender Pro itself. That why you should remove this rogue program in the first place.

When running, Win 7 Defender Pro will constantly display fake security alerts and pop-ups claiming that your computer is badly infected or that it’s under attack from a remote computer. Just like the false scan results, the fake security alerts should be ignored. Furthermore, this fake program will disable certain Windows system tools and bock legit and well known antivirus and anti-spyware program to protect itself from being removed. What is more, Win 7 Defender Pro will block security related websites too. As you can see, this fake program is a scam and absolutely needless program. If you find that your computer infected with this scareware, then you should use the removal instructions below to remove Win 7 Defender Pro from your computer either manually or with an automatic removal tool.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Win 7 Defender Pro you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Win 7 Defender Pro. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

Win 7 Defender Pro manual removal:

Kill processes:
av.exe

ave.exe

Delete registry values:
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %*

HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %*

HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %*

HKEY_CLASSES_ROOTsecfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %*

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe"

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "C:Program FilesInternet Exploreriexplore.exe"

HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "%1" %*

HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "%1" %*

HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "%1" %*

HKEY_CLASSES_ROOTsecfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "%1" %*

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe"

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "C:Program FilesInternet Exploreriexplore.exe"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1"

Delete files:
av.exe

ave.exe

Delete directories:
C:ProgramDataQJyrk5wvCU1

C:UsersAll UsersQJyrk5wvCU1

%UserProfile%AppDataLocalQJyrk5wvCU1

%UserProfile%AppDataLocalWRblt8464P

%UserProfile%AppDataLocalTempQJyrk5wvCU1

%UserProfile%AppDataRoamingMicrosoftWindowsTemplatesQJyrk5wvCU1

About the author

Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author


  • Julie

    Hello, I got this rogue recently and truly attacked my pc to the point of not even opening my programs to delete it…please I need help…what can I do to delete it?

  • Matt

    i have the same issue as Julie, and this is the only computer i have!