Win 7 Antispyware 2011 is a rogue anti-spyware which may enter your system unnoticeably because it applies backdoor techniques of distribution. Win 7 Antispyware 2011 infects only the ones machines that run Windows 7, but it can also come inside with a name of Vista Antispyware 2011 or XP Antispyware 2011 if it detects Vista or XP running there. This program has been actively malvertised in the beginning of November and with its numerous relatives they all make this huge Fake Security AntiMalware Guard antiviruses family.
When this rogueware called Win 7 Antispyware 2011 installs onto the targeted PC, it firstly installs its executable file pw.exe which you will have to stop to make this scamware disabled. After this and some other modifications, Win 7 Antispyware 2011 becomes powerful enough to launch as soon as you reboot your computer and additionally starts continuous interruptions. Phony alerts, fabricated virus scanners and tons of warnings and notifications – that’s what you will get after this rogue anti-spyware gets on your computer. Win 7 Antispyware 2011 typically informs about numerous viruses detected and even shows how it scans your computer to find them. Here are some of Win 7 Antispyware 2011 misleading alerts:
In fact, the only reason why Win 7 Antispyware 2011 was created is to push you into purchasing its useless license. After showing these pop-ups, Win 7 Antispyware 2011 tells that only its “full” variant is powerful enough to remove detected viruses and fix your PC. However, you can be sure that Win 7 Antispyware 2011 ads are not genuine and they give invented information. The only way how you can fix your PC is to remove Win 7 Antispyware 2011. Do this as soon as possible because it may even destroy your OS. Win 7 Antispyware 2011 is dangerous and definitely not wanted on your computer. Please follow the guidelines below to get rid of this scareware.
UPDATE!!! One of PC security bloggers, S!Ri, has announced about a serial code that may help you to disable those malwares that all change their names according to OS they find. Enter this serial code when doing Win 7 Antispyware 2011 registration: 145-17884799-7733. This and the order number 21197673 should also work for earlier versions of this type of parasite. After typing them, you should become able to use your anti-spyware, if it fails follow the guide written below. Be aware that these numbers are expected to change in the near future!
How to remove Win 7 Antispyware 2011:
a) Burn these programs to CD or write them to USB disk. You can use your MP3 player, or smartphone if it has storage functions. This parasite does not spread through USB at the moment:
1. STOPzilla or an automatic removal tool below. Update STOPzilla and run a full system scan.
2. You might want to download Hitman Pro or Malwarebytes as alternate scanners. Though you are likely to be able to download them later on.
b) Boot normally. Wait for XP Guard to launch, and run exeregfix.reg . This should allow launching legitimate programs
c) Delete or remove the files that are mentioned in our files box. You can use STOPzilla to identify the infected files and additional infections or automatic Win 7 Antispyware 2011 removal tool. Do not forget update it before scanning. Remove what it finds.
d) Scan with STOPzilla and secondary tools and reboot your PC. This should fully get rid of Win 7 Antispyware 2011.
Win 7 Antispyware 2011 manual removal:
Delete registry values:
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CURRENT_USERSoftwareClassespezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CLASSES_ROOTpezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe"
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesInternet Exploreriexplore.exe"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1"
%UserProfile%Local SettingsApplication DataopRSK
%UserProfile%Local SettingsApplication Datapw.exe
%UserProfile%Local SettingsApplication DataMSASCui.exe