Severity scale:  

Win 7 Home Security 2012. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as Win7 Home Security 2012 | Type: Rogue Antispyware

Win 7 Home Security 2012 is a fake anti-spyware program that is promoted through the use of Trojans, browser hijackers and other similar malware. When your computer is infected with this bogus software, you will see many fake security alerts and notifications stating that your computer is infected. While running, Win 7 Home Security 2012 will supposedly scan your computer and display a variety of infections that won't be removed unless you first purchase the program. The scan results are false, you can safely ignore them. The same could be said about fake system security alerts, you should ignore them too:

Win 7 Home Security 2012 Firewall Alert
XP Home Security 2012 has blocked a program from accessing the internet
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.

Win 7 Home Security 2012 Alert
Internet Explorer alert. Visiting this site may pose a security threat to your system!
Possible reasons include:
– Dangerous code found in this site’s pages which installed unwanted software into your system.
– Suspicious and potentially unsafe network activity detected.
– Spyware infections in your system
– Complaints from other users about this site.
– Port and system scans performed by the site being visited.

Things you can do:
– Get a copy of Vista Security 2012 to safeguard your PC while surfing the web (RECOMMENDED)
– Run a spyware, virus and malware scan
– Continue surfing without any security measures (DANGEROUS)

Malware Intrusion
Sensitive areas of your system were found to be under attack. Spy software attack or virus infection possible. Prevent further damage or your private data will get stolen. Run an anti-spyware scan now. Click here to start.

To make things even worse, Win 7 Home Security 2012 will hijack Internet Explorer so that you will be constantly redirected to various misleading websites that promote malicious software or display misleading online ads. The rogue application will also block security related websites and antivirus software to protect itself form being deleted. As you can see, program is nothing more but a scam. Please use the removal guide below to remove Win 7 Home Security 2012 from your PC as soon as possible. To help the removal, enter these registry codes: 2233-298080-3424, 3425-814615-3990 or 9443-077673-5028 to make the virus think you have purchased the program. Additionally, use a reputable anti-spyware and delete all the files that beling to Win 7 Home Security 2012.

do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to remove virus damage. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with SpyHunter.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with Combo Cleaner.

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions

  1. Rohwer3 says:
    June 13th, 2011 at 4:06 pm

    I had this same virus but instead of ppn.exe it was under EIO.exe. Might be a 3 letter executable that it installs randomly.

  2. CPC says:
    December 15th, 2011 at 11:27 pm

    I got this virus too, but mine used rys.exe

  3. Richard says:
    June 26th, 2011 at 6:06 am

    I agree with poster 1, on my system the executeable was gaf.exe, so look for a three letter executeable.

  4. David M. says:
    July 27th, 2011 at 9:07 pm

    I could not remove this malware using the techniques or software above (but I also found the executable files were egl.exe and rmf.exe). my pc is running windows 7 and i was able to clean my computer by doing a system restore to a version that i knew was before i got this virus.

  5. Irene says:
    January 3rd, 2012 at 4:20 pm

    I also have windows 7 and was able to get rid of this nasty parasite by restoring to a eariler date. I then ran a legit security scan to make sure it
    was totally gone.

  6. By says:
    January 8th, 2012 at 5:33 pm

    Got the same thing and just reset it to an earlier point. It worked

  7. BJ says:
    July 29th, 2011 at 1:07 pm

    Mine was xfs.exe

  8. JFF says:
    August 12th, 2011 at 1:08 am

    I do agree with the 3-letter executable, but also look in the description of the process. If it is in Arabic, it is the virus. Also i cannot find the files i need to delete, help?

  9. Robert says:
    August 18th, 2011 at 11:08 am

    exe file may also be named sty.exe

    Thank you for the removal instructions.

  10. Noah says:
    August 19th, 2011 at 9:08 am

    It wont let me start security center now!
    And I cant find it under services. When I installed the virus it deleted 2 files! 🙁
    what now?

  11. Digital4D says:
    December 7th, 2011 at 11:22 pm

    Ive had this on 2 vista business machines and one windows 7 enterprise machine. Much like the other mentioned, the three letter naming system appears to be true. The last named version was “htp.exe.” Also, in some instances you may need to fix the class handler for .exes in the registry. An important similarity with each of these instances Ive found were that they all shared a common link to some resource of Windows Media Player, (direct show maybe but I forgot since the time of when I last worked on these issues, my apologies). The source of the windows 7 version I traced back to a rogue java temp package. Hope it helps!

  12. sushi says:
    December 8th, 2011 at 3:45 am

    iyi.exe the bast*rd

  13. oleg says:
    December 9th, 2011 at 1:33 am

    I got infected nad hijacked about 30 min ago, when all else failed, i used stytem restore to flush it out of my computer, and a VERY IMPORTANT NOTE: you CAN run certain antivirus programs by selecting them and clicking “run as administrator”

  14. CPC says:
    December 15th, 2011 at 11:28 pm

    Thanks. Ill try that.

  15. George moss says:
    December 9th, 2011 at 8:41 pm

    I got set up with this fake win 7 home security. And I need help removing it

  16. George moss says:
    December 9th, 2011 at 8:54 pm

    I got set up with this fake win 7 home security. And I need help removing it

  17. SHOman97 says:
    December 14th, 2011 at 7:18 pm

    Spybot search and destroy

  18. PHD says:
    December 14th, 2011 at 10:52 pm

    Thanks all for your help.. it saved my time.. in my case the process was named “awg.exe” please do check for the 3 letter executables and ensure to remove of luck..:)

  19. Patrick says:
    December 17th, 2011 at 1:08 pm

    It will not let me delete the registry files. It says “Unable to delete all specified value”
    Please help ASAP.

  20. Vicky says:
    December 18th, 2011 at 6:23 pm

    Ive got it too but it wont even let me get on the internet…I had to use my laptop just to search for what to do. Im trying the system restore now. Well see in a few minutes……..yes, it worked. Now to get some good virus protection. That scared me.

  21. Katie says:
    December 20th, 2011 at 2:10 pm

    Help I cannot get on the internet and my it wont system restore. The stupid fake win 7 security keeps popping up~ dont know what to do?

  22. jim says:
    December 22nd, 2011 at 6:43 am

    I restored my system and it removed potential problem. thanks

  23. dave says:
    December 23rd, 2011 at 6:37 am

    Same as Katie help

  24. Brian says:
    December 24th, 2011 at 12:30 pm

    If you already have MalwareBytes installed, but are not able to execute it, because the Win 7 Home Security app pops up try the following:
    1. Boot into Safe Mode.
    2. Expect the Win 7 virus app to pop up there
    3. Goto Start -> Program Files-> MalwareBytes, but RIGHT-CLICK, and choose th Run As Administrator option.

    You should be able to update and run MalwareBytes successfully.
    It found the viruses and removed them successfully.

    I then restarted, and I am back in Windows 7 normal again with no issues.

    Good Luck!

  25. Jen says:
    December 24th, 2011 at 3:16 pm

    Just had this stupid rogue installed without my permission and now it is wreaking havoc; it wont even let me turn my computer ON (it shuts down on its own). I am trying to use the Startup Repair tool since the computer wont turn on otherwise… What a pain… Any suggestions?

  26. K.M. says:
    December 24th, 2011 at 4:15 pm

    I ended up with this on Christmas eve. Such a pain. Luckily I found out you could do the uninstaller. Ran microsoft home essentials scan and ended up doing a system restore to remove it all finally. The system restore was finally took care of it. Luckily my hubby is avid about backing up our pc so I have a restore from less than 24 hours ago.

  27. Jenn says:
    December 27th, 2011 at 2:16 pm

    Thank you everyone for all your help. I am running Malware Bytes now using your advice to run as administrator. Hopefully it works!

  28. Bryan says:
    January 9th, 2012 at 4:40 am

    Ive located the source of the virus as cgn.exe , and Ive deleted it. However, my computer still has limited functionality. I am unable to run the Registry Editor, and cannot open any of the Anti-Spyware software. Ive tried using System Restore, and thats even blocked too!


  29. pete says:
    January 10th, 2012 at 11:02 pm

    my files were kwm.exe and sph.exe

  30. AVB says:
    January 19th, 2012 at 12:48 am

    My files were ebs.exe and 713.exe

  31. Carrie says:
    December 28th, 2012 at 10:29 am

    I had this horrible thing but since I had malwarebytes on my computer and it still wouldnt work because of the pop ups, I just right clicked on it And pressed run as administrator and it worked.

Your opinion regarding Win 7 Home Security 2012