Severity scale  

Win 7 Home Security 2012. How to Remove? (Uninstall Guide)

removal by - -   Also known as Win7 Home Security 2012 | Type: Rogue Antispyware

Win 7 Home Security 2012 is a fake anti-spyware program that is promoted through the use of Trojans, browser hijackers and other similar malware. When your computer is infected with this bogus software, you will see many fake security alerts and notifications stating that your computer is infected. While running, Win 7 Home Security 2012 will supposedly scan your computer and display a variety of infections that won't be removed unless you first purchase the program. The scan results are false, you can safely ignore them. The same could be said about fake system security alerts, you should ignore them too:

Win 7 Home Security 2012 Firewall Alert
XP Home Security 2012 has blocked a program from accessing the internet
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.

Win 7 Home Security 2012 Alert
Internet Explorer alert. Visiting this site may pose a security threat to your system!
Possible reasons include:
- Dangerous code found in this site’s pages which installed unwanted software into your system.
- Suspicious and potentially unsafe network activity detected.
- Spyware infections in your system
- Complaints from other users about this site.
- Port and system scans performed by the site being visited.

Things you can do:
- Get a copy of Vista Security 2012 to safeguard your PC while surfing the web (RECOMMENDED)
- Run a spyware, virus and malware scan
- Continue surfing without any security measures (DANGEROUS)

Malware Intrusion
Sensitive areas of your system were found to be under attack. Spy software attack or virus infection possible. Prevent further damage or your private data will get stolen. Run an anti-spyware scan now. Click here to start.

To make things even worse, Win 7 Home Security 2012 will hijack Internet Explorer so that you will be constantly redirected to various misleading websites that promote malicious software or display misleading online ads. The rogue application will also block security related websites and antivirus software to protect itself form being deleted. As you can see, program is nothing more but a scam. Please use the removal guide below to remove Win 7 Home Security 2012 from your PC as soon as possible. To help the removal, enter these registry codes: 2233-298080-3424, 3425-814615-3990 or 9443-077673-5028 to make the virus think you have purchased the program. Additionally, use a reputable anti-spyware and delete all the files that beling to Win 7 Home Security 2012.

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Reimage - remover Happiness
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Win 7 Home Security 2012. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended remover to uninstall Win 7 Home Security 2012. You should confirm using free trial that it detects current version of parasite.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
We are testing Reimage's efficiency (2012-05-10 13:38)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Win 7 Home Security 2012 (2011-06-10 14:57:12)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Win 7 Home Security 2012 (2011-06-10 14:57:12)
Webroot SecureAnywhere AntiVirus

Win 7 Home Security 2012 manual removal

Kill processes:
ppn.exe, agn.exe or similar randomly named 3 letter processes
Delete registry values:
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\BrowserEmulation "TLDUpdates" = '1'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "%1" %*'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe"'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe"'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = '1'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = '1'
Delete files:

Geolocation of Win 7 Home Security 2012

Map reveals the prevalence of Win 7 Home Security 2012. Countries and regions that have been affected the most are: United States.

Information updated:

Comments on Win 7 Home Security 2012

I had this horrible thing but since I had malwarebytes on my computer and it still wouldnt work because of the pop ups, I just right clicked on it And pressed run as administrator and it worked.
My files were ebs.exe and 713.exe
my files were kwm.exe and sph.exe
Ive located the source of the virus as cgn.exe , and Ive deleted it. However, my computer still has limited functionality. I am unable to run the Registry Editor, and cannot open any of the Anti-Spyware software. Ive tried using System Restore, and thats even blocked too!

Thank you everyone for all your help. I am running Malware Bytes now using your advice to run as administrator. Hopefully it works!
I ended up with this on Christmas eve. Such a pain. Luckily I found out you could do the uninstaller. Ran microsoft home essentials scan and ended up doing a system restore to remove it all finally. The system restore was finally took care of it. Luckily my hubby is avid about backing up our pc so I have a restore from less than 24 hours ago.
Just had this stupid rogue installed without my permission and now it is wreaking havoc; it wont even let me turn my computer ON (it shuts down on its own). I am trying to use the Startup Repair tool since the computer wont turn on otherwise... What a pain... Any suggestions?
If you already have MalwareBytes installed, but are not able to execute it, because the Win 7 Home Security app pops up try the following:
1. Boot into Safe Mode.
2. Expect the Win 7 virus app to pop up there
3. Goto Start -> Program Files-> MalwareBytes, but RIGHT-CLICK, and choose th Run As Administrator option.

You should be able to update and run MalwareBytes successfully.
It found the viruses and removed them successfully.

I then restarted, and I am back in Windows 7 normal again with no issues.

Good Luck!
More comments »

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name


(All fields are required)