Braviax
Win 7 Internet Security 2012 is a rogue antispyware program that was recently noticed on the Internet. The program uses Trojans in order to get access to random computer system. To be more precise, Win 7 Internet Security 2012 infiltrates only into those computers running Windows 7 operating system, but it can change its name to Vista Internet Security 2012 or XP Internet Security 2012 and then infect respectively Windows Vista and Windows XP. However, Win 7 Internet Security 2012 is concentrated on infecting systems running Windows 7.
As soon as the program gets inside, it is started with each computer reboot. This means that Win 7 Internet Security 2012 will be disturbing you from the very beginning. If you try to run any of your legitimate programs, it is very likely that Win 7 Internet Security 2012 will block that and instead generate a security alert stating that it could not be run because of certain security issues. Most importantly, the program will run its fake scanner after each system restart. Win 7 Internet Security 2012 will claim that your system contains a bunch of infections that must be immediately removed:
Privacy threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.
Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.
Win 7 Internet Security 2012 Alert
Security Hole Detected!
A program is trying to exploit Windows security holes! Passwords and sensitive data may be stolen. Do you want to block this attack?
Win 7 Internet Security 2012 Alert
Internet Explorer alert. Visiting this site may pose a security threat to your system!
Possible reasons include:
– Dangerous code found in this site’s pages which installed unwanted software into your system.
– Suspicious and potentially unsafe network activity detected.
– Spyware infections in your system
– Complaints from other users about this site.
– Port and system scans performed by the site being visited.Things you can do:
– Get a copy of Vista Security 2012 to safeguard your PC while surfing the web (RECOMMENDED)
– Run a spyware, virus and malware scan
– Continue surfing without any security measures (DANGEROUS)
Finally, the program will offer getting a full version of Win 7 Internet Security 2012 which means paying money for it. Despite nice promises to fix every single security problem on your computer, you shouldn’t trust Win 7 Internet Security 2012 at all. It will only steal your money.
How to get rid of Win 7 Internet Security 2012 fake av
Win 7 Internet Security 2012 will block execution of legitimate programs, namely .exe files. However, it is possible to overcome this.
1. First, try fake-registering it by entering this registration key: 1147-175591-6550, 2233-298080-3424 or 3425-814615-3990 or 9443-077673-5028 (updated 2012.01.14). This should disable Win 7 Internet Security by letting it think you have paid for it.
2. Next, if download of legitimate software still fails, try changing system date to 7 days in the future. You can try to do so even if registration failed. Reboot your PC afterwards and reset date back.
3. Thirdly, if Win 7 Internet Security 2012 is still blocking legitimate programs, download process explorer https://www.2-viruses.com/wp-content/uploads/PE/eXplorer.exe (backup location). Launch it, and stop all 3-letter application processes from %AppData% or %TEMP%. IF process explorer is blocked, rename it to .com. Most of the
4. Important. Scan with spyhunter, Spyhunter and Malwarebytes Anti-Malware for remaining trojans that resulted in Win 7 Internet Security 2012 infection. You should have less problem with similar parasites if you have full versions of these malware removers or/and a decent internet security suite.
Note: There are some similarly named legitimate software, also some different Fake antiviruses that use similar names, for example “Internet Security 2012” (without specifying OS version). The removal for these parasites is different, so you should check appropriate guide.
Automatic Malware removal tools
(Win)
Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions,
(Mac)
Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy ,
This seems to have worked so far. Thanks for mthe help
I have tried the code but it didn’t work help i ma getting pissed off by this virus
Steve LE: There are another way to remove Win 7 Internet SEcurity 2012 (with process explorer) : http://www.2-viruses.com/remove-win-7vistaxp-anti-virusantispywaretotal-securityinternet-securityhome-security-security-2011
i restored by computer to last week and win 7 is now gone
Thank you, for the registration code it worked and unblocked win & internet security 2012
I changed the date to a week ahead and it sorted things……many thanks
Did system restore to a few days back… so far so good. Thanks!
the code not correct…
have another reg key…?
Reg code didn’t work but I set the date 7day forward and worked perfectly. Thanks for the help 🙂
it’s not letting me change the date. how do i fix that?
Stan: try same in safe mode with networking.
I didn´t know that something like WIN 7 2012 exists. So I was swallowed the bait and paid for it and so on. Now I´m checking my computer with my antivirus programme adn praying for health of my computer. I´m so stupid. I hope nobody burgle our flat.
i have no idea what to do here..im being told to have my comp cleaned???help!!!
@Katka
I did the same thing. What happened? What do we do?
I was able to remove this by using the method of changing the calender to 7 days in the future and then resetting the date after rebooting. My question is: Why does this method work? I can understand doing a restore to an earlier date, but not the future. Anybody have an answer?
Paul: If you haven’t bought this malware for 7 days, they assume you will not by this one in the future. So they disable advertisements, and might try reinfect your PC in the future with different one.
I have tried to change my calender liek everyone else but everytime this windows 7 internet security 2012 pops up…what can i do to get this gone? I have online classes to complete today 🙁
got it to change yay!
@Julie
My computer is clean now, no malware in it. And also I changed my credit card and blocked that one with I paid for that fu**in WIN 7 2012. I hope that now everything will be ok.
Are you just going to the calendar and changing the day on the computer? I’m really confused about how to fix it. The registration key didn’t work and I don’t know how to do a system restore
I called microsoft customer support and a nice lady in the philippines walked
me the whole removal process. It took around 2 hours. So far its fixed. 2012
demanded my credit card # and would not go away. If you pay the $69.95 for 2
year service where does the money go?
Ron: contact your bank if you have paid, they might be able to reverse the charges. And (if you paid), you should get your credit card changed.
This infected my work PC and I had nightmares with it! Having found this site (on someone else’s PC) I tried the Reg Key solution but this didn’t work for me. So I changed the date (working in safe mode: for non-techs like me, you have to re-boot ur PC, and while the screen is blank hit F8!) to a week later, rebooted again and it seems to have cleared it! Just wanted to say thanks for your help, you’ve made me look like a right bright spark at work lol!
Doing the date thing worked….thanks! i was really worried
Angie: scan you PC with your Antivirus or download some anti-malware program to double check if everything is clean.
Thanks for the info. I was just curious why it worked.@admin
Paul: The makers of this malware are likely thinking that people that do not buy their “protection” in 6 days, will not buy this version. So they back off and will try the same later on.
I changed the date. But, the internet is still blocked. I could run the McFee, it did not detect anything.
Why did the McAFee fail to prevent the attack.
dan: Mcafee has poor malware detection. I would recommend kaspersky, if you want all-in-one protection. Or Malwarebytes/Spyware Doctor/Emsisoft that are more aimed against malware.
Thank you, Admin. The problem is that I could get on the internet now. I did not reboot the machine after changing back the date. IT seems other applications are working.
What else need to be done after changing forward and back of the date? Thank you again for your valuable help.
Sorry, I meant I could not connect to Internet.
Dan: do full system scan with Antivirus and at least one good anti-malware program.
i found that another way to get rid of this is just to reset to factory default
the program does not recognize the reg. key nor it allows me to change the date or time please help
Sid: You can change date in bios. To do so, reboot PC and press DEL at once – a special menu will appear. Search for the date settings.
I just got this virus on my computer. I was not able to get on any sites or even install my Avast software, which was already downloaded and, stupidly, not installed. I researched the virus on my daughter’s computer and was a bit afraid to attempt to alter the registry myself. I ended up downloading Malwarebytes from her computer, putting it on a thumb drive, installed it on mine from there. I had to ignore all the pop up windows from the virus which made it look like nothing was happening, but it did install fine, ran the program, and it worked great. I’m now back to normal.
my system just got infected with this nasty Win 7 internet security 2012 and i have tried evrything possible including the code and changing the date, none of it is working. my internet is still blocked so i cant download the spyware doctor, i am so pissed off, what do i do now?. i tried paying for it before i found out about it but i couldnt remember my visa pin, do i still have to change my card….pls reply asap
The date tricked seems to have worked! Thanks a lot!
So when you change the date forwards or backwards…….after you download malware anti virus protection….do you change the date to the correct date?
Change date, reboot, let it fully boot, change date back, reboot, download anti-malware tools and scan your PC with couple of them. Antivirus and Anti-malware programs might fail to update if your PC date is incorrect.
I am at work and will try the date change tonight and will let you know if it worked…… wish me luck.
I’d still like to highlight my idea of downloading Malwarebytes or Spyware Doctor, etc., on a separate computer and uploading it with a thumbdrive. It was really simple and got rid of it completely on my system. I didn’t have to go into my own registry or anything…
My sister’s laptop was infected and thanks to you win 7 was removed
The second key worked fine and it said that I successfully purchased the program and that my computer is clean. So now what do I do? I downloaded spyware doctor to see if it is clean and it said I have infections. Please help me, I need to get back on my computer.
Kevin: Delete the files SD finds. Do not forget to fix registry as well.
I turned off my computer, (well actually laptop)and I went to normal start and I get a black screen with a box in the middle. I’m not sure what to do, and spy doctor is a trial version and my webroot antivirus with spy sweeper is expired which I haven’t gotten a chance to buy it again. I can only send these messages on safe mode with networking.
Well , Now I managed to turn on my laptop normally , the black screen didn’t pop out after my 3rd attempt to turn it on after I have did the second key. The win 7 home security 2012 is in my taskbar and I’m not sure how to completely get rid of it and not seeing it ever again. Any solution I can try to delete this virus?
Yes, resetting computer’s date to one wk ahead worked. Then reboot your computer and change the date back to normal. Next do a windows system restore. Do a system restore back to last wk. If you don’t know how to do that google “windows system restore”. Or do this. Open System Restore by clicking the Start button , clicking All Programs, clicking Accessories, clicking System Tools, and then clicking System Restore. Do a system restore back to last wk. This solved my problems with this virus/menace. Thank’s for your help!
john: It is better to use anti-malware and virus programs instead of system restore if you re-gain access to PC. This is for one reason: System Restore might leave part of the malware active, both because you do not know the date of original infections and because system restore does not clean everything up.
Thanks, the code worked for me and so far, so good! 🙂
It worked thanks to you!!!!!!!!!
It helped me to a very great extent thanks a lot
I was able to remove the destructive and annoying parts of the program and I think that the program is gone. The problem is that even after removal my browsers will not work and I am not able to access my internet at all. Nothing will show that it is connected besides the fact that I show complete internet access.. Need some help. I have tried your suggested date method but can’t figure out how to make the browsers and/or anything else connect to the internet. Any help is greatly appreciated!
thank you very much, the second reg key worked here
Trent : Scan with anti-malware tool. Use USB stick to install the programs.
The second registration code worked for me!
I have helped several friends remove this malware. Thanks for your advice. Do you know how the malware gets onto someone’s computer?
thank you very much, the second reg key worked here
hey how do you do the date thing?
What I thought was funny is that this program is basically screaming at you that your information is going to, or is getting, stolen right out from under you, and won’t let you on the internet for any reason, but when you click on “buy the full version” of the pop up window, it wants you to add your personal information as well as credit card information into their “secure checkout” haha
uhhh…. if my information is getting stolen, do I really want to put my credit card into your website right now?
another registry key is 4852-249915-8202, i know because i was stupid enough to buy it thinking it was from microsoft. it makes me sick to think i spent $100 on thins. times are too hard right now and whoever made this should be ashamed! @sky
Having a problem caused by Win 7 Internet Security and Personal Shield Pro, I tried to forward date my system but couldn’t and I used the various registration codes, they also didn’t work. I then went to Spyware Doctor and lo and behold, I got rid of both, albeit it cost me $30 for a one year subscription. I would like to thank all the above for helping out
When turning on the computer I have a completely blank screen when this virus is running. I am in a hotel so cannot access the Internet without entering hotel room details so I cannot access the Internet! Any idea how to get rid of the blank screen so I can try and sort this thing out? I can access my task manager.
James: look for malware processes. Typically 3-letter names. After killing it, you either start seeing desktop (if not, launch from task manager explorer.exe) or malware process stops. You can also try doing system restore
Thank you very much I was going to pay the $69.95 for 2
year service until i checked win7 Internet Security 2012 on another PC and came across your web site, And your web site fixed it for me thank you thank you, Bob
does spyware doctor get rid of it?
Eric: Update and scan with it. If SD detects trojans, it should get rid of them.
So I must change the date, reboot, change the date back, add anti malware. How do I change the date? Can I add the anti malware while I still have Kaspersky installed. Is it free?
Andy: If you got kaspersky, I would recommend MBAM. First scan (scanner/remover free), however i would consider purchasing full version for protection in the future.
if this will not remove parasite, scan with SD. If it detects parasites, you can delete files manually or buy full version.
Cant get the registration screen to pop up, any advice?
OK admin and you all are a life saver. God bless you. I followed basically what was heretofore advised – OK roughly. I suckered into buying the Win 7 Internet Security 2012 software too – dumbass, OK, but it wouldn’t let me go or do anything else. The thing had me cornered (all the more reason not to buy). I knew something was fishy when my Malwarebites Anti-Malware wouldnt run to check all this out. Now I found out that this WIN7IS2012 virus was blocking that. For a while there my computer wouldn’t start Windows up! I was freaking out. Then it just hung there when I tried it in safety mode after downloading a few files. So I turned it off again and tried to reboot in Safety Mode plus Networking, which prompted a restore option. It went through the process of restore and at least started Windows;however, then it said the restore didn’t work. So I forwarded the date and then used restore option view Start, Programs, Accessories, etc. Well, it still went through the process and told me afterwards that the restore was not successful; however, I noticed in the panel on the right that a couple of legit programs I had downloaded recently were no longer listed there, BUT the desktop icon for them was. So, I am guessing this goes with what you are saying about restore being able to fix the biggie, but not erasing everything. So now I am running Malwarebites Anti-malware (now it works, imagine that) – the fact that it now works also leads me to believe the restore worked enough to get rid of the main portion of the virus. If Malware bites or whatever it’s called doesn’t find anything I am going to buy Spyware Doctor to make sure it is all gone, because I believe you when you say there are likley still existing Trojans and other nasties. Anywyas, thank you it’s 4:30 am and without your help I though my computer was going to crash and I was really upset – so thanks thanks thanks. You’ve really helped alot of people.Alos had to cancel my credit card and then I have to wait until the charge posts for them to “dispute” it. I hope these creepy perps go to jail for a long time and are bloody miserable. Bloody ‘ell! I hope this works for everyone else too.
thanks admin. the second number did work for me.
thank you so so much
I change the date and it worked perfectly though foor some reason my computer is now quite but at least the virus is gone. Anyway, for all those people wondering, i just went to control panel>Time, Date, Time Zone> Set time and date at then just change the date to 2 weeks ahead.
thank you so much!!!
1. Boot into save mode and kill process “eah.exe” using task manager
2. Go to his folder C:\Users\yourusername\AppData\Local\ and delete eah.exe
3. Make sure you turn on UAC so this won’t happen again
4. If you try to open any program and it says open with then you need to download this exe fix
http://www.sevenforums.com/attachments/tutorials/123734d1292473157-default-file-type-associations-restore-default_exe.reg
5. You can scan you computer with a spyware tool.
Doing the 7days ahead date thing worked….thanks alot admin.
l purchased kaspersky anti virus, and installed it and ran a scan and it recognised the virus straight away and removed it.At the time l got the virus l had McAfee anti virus which does not detect it, l highly recomend kaspersky and would never use McAfee again, it is crap!!!
Had to restore Toshiba Satellite to factory settings and no sooner done than new clean system got infected! I used the simplest way changing date to 2 weeks ahead and it worked immediately Will be installing Kaspersky antivirus again ASAP
thank you soooooo much
after i put in a fake code, it worked, i can open internet, im trying to download the doctor thing, it will delete win 7 2012 right? and thanks 😀
it is frustrating, and drive me up up the great wall of china, i restored my settings to a earlier time, and it seems to work… for now,, good luck,, and stay calm, haha
I did the 7 day thing, and it seems like it worked. but, how do i know that its gone? ive scanned with AVAST! but i havent found anything,
Leo: Scan with couple anti-malware programs. If Avast is your regular antivirus, it let Win 7 internet security through. That means it does not have it in database yet, so it will not detect it. Thus you need to check with other tools
Is there any one certain Anti Malware program you would recommend? Spyware Doctor, or something else?
For fastest check, I would recommend scanning with Hitman pro – it uses couple engines, thus it might detect the most as long as you got internet. It does not provides real-time protection though and uses bandwidth. If you are looking for both protection and good detection rations, I would suggest full versions of SD or Malwarebytes.
Awesome 🙂 ty admin, you are a total life-saver
Will norton 360 delete all the malware??? Please help I just want my laptop back
Shaddow: you should try. Norton detects malware of this family, however, it changes on daily basis somewhat, so no antivirus is 100%.
@admin, I’m trying to use process explorer to “kill” all the 3-letter applications some of them say they can’t be killed. However even after doing this I can’t run any programs… spyware doctor or the malewarebytes anti maleware. I would like to stab this virus in the face with a hot soldering iron.
Jason: use run as administrator option (right-click on executable you want to run, then run as administrator).
First, try fake-registering it by entering this registration key: 2233-298080-3424. This should disable Win 7 Internet Security by letting it think you have paid for it.
This really works…..Kudos..Thanks for the post!!!!!
i just bought 2 years of win 7 security like 2 months ago and my computer is infected with all kind of virus fuck :/
this just popped up out of no-where, and it wouldn’t let me open my anti-virus scanner (Microsoft Security Ess.) so I tried doing it in safe mode, no such luck. so, I just did a system restore to like the 18th of Nov. and am currently running my anti-virus… it’s already picked something up, and i’m not even doing a full scan, just a custom one.
I did a system restore and is working for now at least…. we’ll see. Right clicking and clicking on run as admin allowed me to bypass the win7 internet securities. Hope this helps someone.
I tried both reg keys and I set my laptop’s date up 7 days and niether worked. Please Help!
I can’t do a system restore (won’t allow) and moving the dates ahead or behind does not help.
I can’t do a system restore (won’t allow) and moving the dates ahead or behind does not help.
I used malware bytes, and it worked for me.
I tried all the registry keys and none of them worked. So I right clicked on the IE icon and chose to run as admin. This allowed me to bypass the Win 7 Internet Securities. Once I had access to IE, I downloaded the free MalwareBytes software and did a complete system scan (took about 2 1/2 hours).
System back to normal now.
OMG I LOVE YOU!!!! thank you so much, i couldnt stand that damn virus!
@ali
@everyone who keeps asking about the changing the clock to 7 days ahead— Somehow by doing that today myself when i was infected by this stupid virus and couldn’t get anything to open in safemode or otherwise, after i changed the clock ahead 7 days and restarted it into safemode, it actually allowed me to download and finally install malwarebytes into my computer therefore allowing the scan to happen and find this horrible stupid virus and finally get it and all its other components to be removed. It was then back to normal after restarting after the scan and removal process of malwarebytes anti malware program. So I’m thinking the setting the clock ahead somehow allows you to be able to dl certain malware removal programs into your computer whereas you wouldn’t be able to without doing this. So thanks for the help and i hope this explains this process a little better to people who have no idea what this even does. 🙂
You saved my life. Thank you!
Where exactly do I type in the code to block it?
Typed in the second code and it activated. Now it’s letting me use my legit software, thanks a million!
Thank you thank you thank you! The second code worked for me. Very quick and simple once it got through. Between all that went on with trying to get rid of this myself and an electronically challenged parent wanting to “help” you saved me a major headache!
I noticed some of your posts on here. Were you ever able to get rid of your taskbar icon for Win 7 Anti-Spyware 2012? I have the same “trial” for Spyware Doctor as you mentioned, so I’m not sure how to proceed. Is there any other steps you took to actually get rid of malware from the Spyware Doctor scan or to get rid of the icon in the taskbar? Thanks for any info. @Kevin
Jeff: Update SD, scan. If you want, delete detected files manually.
I’m having the same problem can’t get it off my taskbar HELP please
I already entered the registration key and everything. I then did a virus scan and it picked up a couple of things, but my computer was still infected. When I restarted my PC, none of my usual programs started up, and I couldn’t open any other programs. So I restarted in safe mode and managed to get Malwarebytes to work, which picked up some stuff as well, but my PC is still unresponsive in regular mode. The little icon is still on my taskbar as well, so I know for sure it’s still infected. I have gone to other websites that offer other solutions, but almost all require me to download something, but I do no get an internet connection in safe mode. What do I do now?
Oscar:
I would guess your registry is messed up.
Try this:
Click Start and then click Run.
In the Open box, type explorer and then click OK.
Navigate to the Windows directory (e.g. a typical path may be C:\Windows) and locate regedit.exe.
Run Regedit:
On Windows XP systems:
Right-click on regedit.exe and select Run as. Uncheck “Protect my computer and data from unauthorized program activity” and click OK.
On Windows 7 or Vista:
Right-click on regedit.exe and select Run as administrator. Click Yes to accept the UAC prompt.
Using Regedit, locate and then click on the following registry key:
HKeyCurrentUser\Software\Classes
On the left panel, right-click on the following registry subkey:
‘.exe’
Select Delete and then click OK.
Locate and then click on the following registry key:
HKeyCurrentUser\Software\Classes
On the left panel, right-click on the following registry subkey:
‘secfile’
Select Delete and then click OK.
Close Registry Editor.
I have removed Win 7 Interest Security 2012 using various software and machine are boots cleanly. The problem is that I cannot get internet access through my either Chrome or IE. I am connected but when my browser trys to load a page I get a failure because the DNS lookup failed. When I run the Windows Network Diagnostic i get “Your computer appears to be correctly configured, but the device or resource (DNS server ) is not responding. Help, please
I can’t find “secfile”.
Evan : read this guide : http://www.2-viruses.com/how-to-fix-google-results-hijacker-google-redirect-virus-problem about dns servers. It is likely that your DNS servers were hijacked.
I can not get any of this to work..date won’t work, one of the registration codes worked, however I still cannot install any of those malware programs or spyware d. …and when i try to go to webpages i get random other pages not the one i want…plus when i click system restore it says cannot be found make sure you typed it right and try again…PLEASE HELP
I can’t even seem to install microsoft security essentials, it keeps telling me that “the network that you are trying to use is on a network resource that is unavailable”
OK I entered one of the code it work but then my network is disconnected. it said “no Internet access”. I know that it has to do with this , and i have no idea how to fix it.
Henry: run TDSS Killer and one of anti-malware programs from USB disk.
@Steve Le
hey i got rid of the files but when ever i select a application i have to right click and select run and when i just click on it it popes up a open with box saying please select a program to open it with help plzzzzzz!!!!!!!!!
i tried the 2nd numbers it has worked . but how do i get the icons to come back up i have a blank screen
Hello,
This virus popped up on me last night. I followed the steps on bleepingcomputer and it seemed to get rid of all of the pop ups associated with the virus, but now I cannot connect to the internet. I am able to see the available connections, but when I try to connect to my internet it wont work. All my other computers can connect. I tried scanning with malwarebytes, avast, and advanced system care, but none of them picked up on anything. My malwarebytes isn’t updated and I can’t update it because I can’t connect. I don’t know what to do!
Thanks,
Jack
Thank you so much!! The 2nd code worked for me!!! You’re awesome!!!! =D at first I thought it was a legitimate program for window that I already had, but I figure it was a virus because it blocked everything! my Internet, win defender, firewall and it was asking for money lol so you know that’s a virus xD Thanks againg you said my life!! And 40 bucks!! xD
Jack : scan with TDSS Killer (use USB Drive). Disable proxy server in your browser, this might help as well. ( a section about proxy servers applies from here : http://www.2-viruses.com/how-to-fix-google-results-hijacker-google-redirect-virus-problem ). In worst case, call 800-839-3572
Thank you thank you thank you!!!! Omg I’d kiss you if I ever meet you!!! Thanks a million 😀 the last code worked for me!
Hey, this stupid thing popped up on my laptop last night. The laptop totally went psycho not letting me access malewarebytes to run scans or anything and all of this was under the administrator. Under another account I was able to run the malewarebytes scans, but nothing was showing up, and it wasn’t allowing me to run it as administrator because the stupid Win7 was blocking it. Eventually(at 5am) I was able to get the computer into safemode and run spybot that way and it found malware and trojans on the computer and deleted them and the computer seemed to be running ok enough that I felt ok going to sleep. However I’m still nervous because the stupid icon for the virus win 7 thing is on my malewarebytes icon on my desktop as well as PC Scan Repair and Reimage I downloaded last night and a couple of my brothers online gaming icons. Last night when I tried to click on the items with that icon on them they wouldn’t pull up, but now they pull up and run fine. So I’m wondering, is the virus gone and this is just a residual “stain” or something? Help!!!
I’ve even tried uninstalling malewarebytes and reinstalling it but it still comes up with the stupid win7 icon on it! My computer still seems to be running fine and has seemed that way all day, but the presence of that stupid icon on my desktop on things has me nervous, even though malewarebytes and spybot don’t seem to find anything on the computer. I’m very nervous!
My HP laptop was infected with the Win 7 2012 AV trojan yesterday. It would not let me open anything. I tried the keys and changing the date, and those did not work. What did work was re-booting into safe mode and running Spybot-Seacrh & Destroy. It found “fraud… something” malware and when it fixed those problems, the laptop is back to working. No signs of the malware today.
Melissa: Try other tools. MBAM might miss some versions of Win 7 Internet Security 2012 in databases. NO antimalware tool is 100%
@admin
Like what? I’m a novice on most things so I’m not sure what to use thats good.
I used the free download of Kaspersky and it didn’t show anything either. So does that mean its gone? Even though the icon for the virus is still on different things on my desktop? Even new things I download?
one thing i did which worked (or seems to have worked, anyway..it’s now a day later) is that i just did the “system restore” process, using a date and time right before the date and time when i knew i had accidentally download this trojan. (you can find the System Restore program by clicking on start, then search for “System Restore.” From there on, it’s very simple.)
I found out about this solution, almost accidentally, from my computer guy, who I called after this trojan program was preventing me from getting online (which i was trying to do so i download the spy doctor program). This trojan thing was really freezing up my ability to do much of anything on my computer.
P.S. If you do this, be sure to use “system restore” and NOT “system recovery” (“system recovery” apparently causes you to loses most of the data in your computer, or so I am told by my computer guy, who i trust).
Btw, i didn’t have any luck using the spybot program, even after i updated it completely. Not sure why.
I also didn’t have any luck using the registration code idea. Maybe i don’t know enough, but it seemed like i would have to give them my credit card number to get to the stage when i could enter a registration code, and I didn’t want to give those scumbag trojan-creators my credit card number.
perfect, removed all fake messages. 3rd code worked, thanks a lot!
Melissa: no. Scan with Spyware Doctor, Stopzilla or MBAM. If Kaspersky does not detect it, but icon still exists, it is still there.
Thank you so much! The 3rd code worked. I know very little about computer things so this was a major blessing.
ok i need help. have read everyone’s messages especially the admin and i just cant seem to get anywhere within the other lap top. I know i need the dummies for computer book or whatever it is called. Admin you said hit delete and a box comes up but i never see a box. only thing that shows up is my daughters login. Also where exactly do you go to change the time. Been at this bleeping thing for three hours and have gone no where.
The pop ups are not there so can not try any of those fake codes and I can not download anything. Is there anyone i can call?? This is so frustrating
Steve: try +1 888 557 8172.
Thank you! Setting the date ahead worked
Thank you I will give them a call
Ive been working on this for a while. Its disrupted my schiol work and I have stuff due:(
It happened tonight. I set clock forward in safe mode, reboit in safe mode, now Im trying to run sd.
However the virus has hijacked the sd installation. I watched task manager in safe mode and noticed 3 letter filename of ujn.exe. I ended task on it and win 7 disappeared. But when I clicked on sd it reappeared.
I did put in that registration code though which several sources said would fool it and allow me to run my software. But the only thing that did was stop so many popups
SD doesnt work. The evaluation version doesnt remove anything
J: Expand each of threats detected and delete manually.
I scanned using Microsoft security essentials and it seems to have removed this virus and the icon. Thank
Run pc in Safe Mode with networking. Download Spybot: search and destroy for free. Run it. Done. Reboot.
@admin
Thank you so much!
I tried every method, I set the clock back and that helped (although I had to do it in safemode), then I installed malwarebytes and that took out the virus but then when I tried to open any file (firefox, IE, WE, command proprompt, etc.) they wouldn’t even budge. Some weird message came up asking me to chose how to open them.
I was so scared that I had really screwed something up in the virus removal process and then I saw your comment to Oscar.
After I deleted the .exe from the registry (I didn’t see the other one, the secfile anywhere so I left that alone) my computer went completely back to normal. Virus beaten!!
Thank you so much, best method ever. This site has helped me through so many viruses that I just couldn’t beat. You always have the best feedback and your people really know what you’re talking about. Awesome, awesome site and support staff.
Thanks a million!
3425-814615-3990 this code worked for my system. Do i need to do anything after this process?
Hi,
I am right where rwalther is… ran mbam rebooted (Win 7 Internet Security is gone)and now win 7 opens fine but can not open a single program. I can not open the registry editor or chane the system date either. Thanks in advance.
Veera: scan with anti-malware tools. This code disables malware partially only.
Gordon: Restore default association of .exe.
Now I’m suspicious. I thought Spyware Doctor WAS a virus?
XXX: PC Tools, makers of Spyware Doctor are owned by Symantec now. If you think, that Symantec would purchase illegal company, then you do not know how important reputation is for AV company. Although there were couple shady tools with similar name, also, there were some dirt pushed by advertisers of some other software.
Hey I used the third code and that worked at first then I downloaded the SG and I did a full scan I deleted the files it detected and now I can’t open any of my programs on my computer. It asks me what I want to run the program with and Im not sure how to fix that please get back to me as soon as you can
You have to restore .exe file associations.
Wow called trend micro (my antivirus subscription), and they quoted me at like 169.00 to repair. geek squad was $150, and so was staples i think. I used the third code and got out of safe mode and am using stopzilla. it worked. microtrend deleted a trojan on its routine scan… wow. amazing site you have here. thank you
My computer was infected yesterday,and I entered one of the codes and it seemed to work so right after that I ran my antivirus and it told me to reboot the system so I did. When my system came back on the virus showed back up. Then I shut it down and and entered safe mode however when I went into safe mode the virus showed up in safe mode. Do you have any suggestions on what to do now?
ok so I just found this site today while in safe mode with networking. this win 7 attacked me last week and i was able to do a restore in safe mode and regain access to my internet. (I’m a freshman majoring in networking and security, so I knew this program wasn’t legit. A real program would allow you to have the option to ignore all warnings. This one, however, backs you into a corner and doesn’t.) Welll, yesterday my computer was attacked again. After lots of cursing and otherwise acting like I had lost my mind, I accidentally found your site in safe mode with networking.The 3rd key worked. I have done some additional research, and I am led to believe that even though I entered a key and am no longer receiving popups, that this program is more than just a scam to rob people. I think it is a keylogger, and anything you enter on itis stored and sent to someone else. I am presently broke, but I fully intend to purchase spydoctor or a similar anti-malware with my next check. My advice to all: just because the boogeyman quits making noises doesn’t mean you are safe. Purchase something to effectively remove this from your computer.
Kevin: press CTRL+Shift+ESC in normal mode and kill malware process. After that you will be able to download anti-malware programs or delete the files.
THANK YOU SO MUCH! Worked perfectly!!
I’ve been dealing with this stupid virus for the past 5 hours, the 2nd definitely works. Thank you God!!
I’m seriously about to cry.
Just download McAfee Labs’ freeware “Stinger 10.2.0.436” (8.778MB) released on December 20, 2011. It will scan your C: drive and fix your malware such as “Window 7 Internet Security 2012” automatically.
I was going crazy over here but thanks to you I was able to remove the fake virus protection off my pc without paying $$$$ to do so.
So I changed the date to seven days after but now I can’t open any .exe programs because it asks me to choose a program to open the file with, now I can’t even reset the date because it is an .exe file.
Taylor : Restore .exe file associations to default
The last reg key worked for me, thanx a lot!
Help! After changing the date Im getting this message… Windows cannot access the specified device, path or file. You may not have the computer permissions to access this item. I dont see this message in safe mode.. and its working fine.. Please advise.
Check if you can close the message. Try createing another use account from safe mode.
I moved the date up seven days as stated and it worked! Then I scanned with malwarebytes and it removed it. My computer is working just fine!
Thankyou for this! It scared me half to death when it popped up.. It is working so far, thanks again.
My computer was infected a week or so ago and would not let me open any programs or internet access. I turned it off to avoid my kids messing with it. I downloaded something from malwarebytes.org onto a thumb drive to see if I could get rid of the virus. Now I’m ready to go but the computer wont turn on. I’ve tried unplugging it, waiting, plugging it back in, holding the button for a while to see if it would re-boot, even tried plugging in the thumb drive with the same procedure but absolutely nothing happens. If you have any suggestions I’d greatly appreciate it.
THANK YOU SO MUCH!!!!!!!
I tried the clock ahead 7 days. but it didnt work. Then I used the 3rd code and it worked. I’m running another scan with McAfee, but I’m really upset that it didn’t catch it.
Hey thank u so much
I entered the second code into the manual activation and it seemed to work so far. However, my Kaspersky anti-virus program doesn’t display text and yet notifies me that my databases are obsolete. Can you think of any solutions that would allow the program to show text again?
My Dad’s computer was pretty much inoperable. Nothing could be done. After doing a bunch of research, this is what I did to get it off my Dad’s computer.
1) Go to bottom right corner of your screen. Click the arrow and then click on customize. Search for Win 7. It will have a name assigned to it. Every computer will have a different name. The one on my Dad’s said Windows Error Reporting Service.
2) Ctr-Alt-Delete for task manager. Go to process screen. Look for the file. It will be a 3 letter .exe file. (I right clicked on the files and clicked on properties to see if I had the right file called Windows Error Reporting Service. This was listed as wmt.exe, but again every computer will have a different file name) Once I found the file, I ended the process or killed it.
3)The virus is still in the system, but killing the file should enable you to open the Malware/Malbytes program, which I couldn’t do before. Malware/Malbytes will find the virus and remove it for you. (I recognized it by the wmt.exe file name when Malware/Malbytes listed certain files as infected and removed it, so I knew that I had licked it.) Have had no problems since running the computer or any other programs.
brad
Scan with TDSS Killer first and MBAM or Spyware Doctor. Then reinstall Kaspersky
THANKS! The last code worked and my computer seems to be back to normal!
I had this on my computer before, and I had downloaded the free malwarebytes to remove it, however, I do not think Malwarebytes got rid of it. I did as Lynn said and I found it there still listed but it is not in my processess. The main reason I still believe it’s still there is because before I had it, I noticed my Verizon protection’s firewall kept getting turned off and when I try to turn it back on it wouldn’t do anything. If it pops up again I’ll try to use the codes you have listed and hope they work.
I’ve also ran Mawarebytes, Spyware Dr, and Spybot S&D and it did remove some stuff, but my computer still was having issues. I too cannot engage my McAfee firewall or Windows firewall. I did find a process dwm.exe Desktop Window Manager and stopped it. Now my computer is running better but still cannot get my firewalls up. Don’t know what to do next.
Dennis: DWM is legitimate windows process. Run TDSS killer first, and then Hitman pro. After that run CCleaner to see if there are no registry/dll problems.
There’s a special place in Hell for people who come up with crap like this.
i did what you said (i think i might have did something wrong) but when i rebooted the computer, the user account’s screen was black with no icons or dock. What can i do?
After I run Malwarebytes, delete hjs.exe from the folder it was put in, then reboot, when Win 7 comes back up, all of my icons are corrupted and if I click on them it brings up the “which program would you like to run this with” thing, although I can open pinned websites and can only get to explorer by going to My Computer. This really messes up my work flow, any help?
Rach: Try system restore. Also, try pressing ctrl+shift+esc, new task, explore.exe . If it wont help, PC repair time, try +1 888 557 8172
I used the codes that were provided and code number 3 worked for me. Afterwards I installed AVG Free Antivirus software and ran a scan. It seems to have worked great and removed the the Windows 7 virus and all my programs appear to be working fine. Thanks so much Admin.
The last code worked, but changed the system date 7 days ahead, re booted and changed the date back again after. Just wanted to make sure. It restored browsing … Thanks a mil
Thank you so much for writing this it helped a lot
how do i change the date on my laptop to get rid of this Win 7 Virus? Please help!!! thanks
Omg u r a life saver, my laptop was infected and I was unable to open up internet and search for whgat was the cause. Luckily I had my blackberry, the lasT code worked for me(include hyphens)n now I’m running Antimalware, hopefully it works. Truly from the bottom of my heart, ty. University starts tmw and I would be in big treouble without my laptop. Ty again!
Thank you sooooo sooo much! Ugh such a relief!
The 3rd key worked for me thank you soooo much!
I got this virus and immediately removed it using Avast. However, The virus had already done damage to my registry and i could not open .exe files without right clicking and using “run as administrator” I read as much as i could on the interwebs and discovered that the registry needed to be brought back to default. I found a zip file with all the registry keys set to default and i individually merged them into my comp. As far as i can tell that has set everything right.
Worked like magic! Thanks so much from the bottom of my herat
i used the 3rd key and it worked. it tryed to update itsself then, and just as the update was about to complete norton 360 blocked its action. but yet i still have this program on my PC. i cant imagine having this program on my PC being good even if norton is blocking its actions, afterall norton let it on my PC to begin with. how can i completely get rid of this program. im not very PC smart and could really use a simpletons explanation step by step on this.THANK YOU.
after digging around a bit more. if your using norton go to thier website and use the power eraser tool. it found the files when my regular norton didnt and fixed the problem.good luck
the norton eraser tool did work. although i think the virus curupted me exe. files cause i couldnt open anything on my PC without manually going in and finding the file needed to launch whatever i was trying to open. a Rep. from norton can help u restore everything. just go the the support tab on the website if u have norton.
Adam : you just need to run .exe file fix script (.reg file). search for your OS, there are plenty of these.
hi I typed in the codes given one seem to work but later today the computer was reinfected by win 7.I had to do the time thing just to access the internet and cant download either anti spyware programs because computer already has norton. contacted spyware doctor support they wanted 90 something dollars to remove win 7 witch is obserd or to buy their cheaper program for 20 sothing bucks no garinty that in would fully remove win 7 and other programs like it witch is stupid. Why cant they charge 20 bucks to use their advanced program to remove win 7 Im not ask for them to give it away but I could work 5 hours and not be paid that much for what they only need about five to do, such as tap in to the computer in question and run their program then just wait till its done then uninstall said program and leave. why do they need to rob people for simple tasks and to tell me its not simple writing the program was the hard part distrobution is easy because almost everything is wired some how to the internet. Im sorry this message is long wind but had to much to get across.
Alex: Malwarebytes and Hitman Pro should not have problems to be executed with Norton ( look here : http://www.2-viruses.com/reviews) .
My new computer is infected with win7 and it will not let me open anything on the internet. How can I get anything on that computer when I can’t get on the internet? It also has Norton anti virus protection and I wonder how Norton let it through? I am on my old computer now. JoAn U’Ren Please help me.
JoAn U’Ren
Try our guides or this video : http://www.youtube.com/watch?v=15QrZkhGKB8 . If still problems, try calling +1 888 557 8172 or repair shop time.
I just got the win 7 security 2012 virus and im in safe mode with networking and just downloaded this. is that all i have to do?
Jeremi: Scan your PC. Delete the malware files found. Preferably, do this in regular mode.
I used the fake registration number: 3425-814615-3990 and it worked perfectly. I then ran my Spybot Search and Destroy (Free version) and my Crap Cleaner- or CCleaner (which is also free) and that seemed to solve all problems. Thanks for your help!!!!!
The whole change the date on my computer worked for me then just ran hit man pro and my problem is gone…. thanx for the info on this annoying problem
Thanks for the advice, had it last night and had to research on my fone, all cleared so many thanks!!!
thnks a lot, thanks 🙂
I spent all day sorting this c rap out! System restore to a date prior to the computer being infected by this virus worked for me. also deleting some exe file using ctlr+Alt+del seemed to have helped…i tried a few tricks with the help of all the comments on various blogs 🙂
I had this get into my computer a couple days ago and called my pc help support and they told it me it was going to cost $170 to have it removed. I unplugged my internet connection for a little over 24hrs, and when I plugged it back in the warnings weren’t coming up anymore. My firewall still would not come back on though so I contacted McAffe and they got it back up again!!! Do you think the problem is still hiding in there somewhere?
OMGG…I’m an idiot when it comes to computers and the LAST registry key # WORKED. This virus won’t LET u do a system restore.(until u download it w the fake key # heehee) And its impossible to go online to do ANYTHING. EVERY CLICK =POPUP of a threat…ugh. whoever wrote this out is a frigging genious and ill love u 4ever for getting this out. Thank uuuuuu,xoxoxo
Using the last reg key I managed to get control of my pc went onto system restore and it’s now gone.
Thanks a lot! I’ve spent all day trying to sort this too no avail. The dummy-code worked fine (I didn’t download it though, should I have done?) but after I ran Spyware Doctor it didn’t detect any virus; is this usual? I restored my computer to a week ago’s setting but Win 7 Internet Security 2012 still remains there! Is it still doing damage? How can I get rid of it? I can’t seem to get Mcafee up again to sort it. Please help, much thanks in adavance
I’m working as a CSR for an online company and have used this to help our customers out many, many times!! Thanks for all the information you all have provided here, it’s saved us much time and money trying to fix the computers when they get infected.
@Holley
haha
They try to backdoor people; and someone will try to “backdoor” them hard very soon…I’m going to strap mines on.
Even when I used the keys; to make the program “valid” the trojan was still there; so I actually did a system restore; that SOLVED the problem
Damn a/holes; had me *literally* going in circles; having; to keep; removing; the same damn trojan; in the same damn spot; several times and restarting my computer a good; 8 times or so in a freaking row; before system restore kicked in.
@jessica simpson
Omg, I know right! Lol. Before I found out about the fake registration number I was about ready to throw my computer out the window. So irritating. Why would something like that pop up out of nowhere to begin with? Lol.
Todd: thank you.
the last key worked thank you so much.
Don’t forget to scan with your antivirus for malware leftovers.
I set my date back 7 days, got semi-controll of my computer and ran system-restore.
This thing is driving me bat ish crazy. What do you type under registration email? Thanks
Can someone help me remove my win 7 virus for free.
Hi, I have tried changing my date to 7 days later but it does not work for me. I have also tried all registration codes but doesn’t work too. I think this malware has updated itself a little by prompting us to key in a registration email together with the registration code. I used process explorer but realised that there are no 3 letter processes in AppData and TEMP Folder. Is there any other way to solve this issue? Thanks a lot.
Gary
Try killing 3 letter processes from everywhere, or other randomly named processes from AppData, Program Data, Application Data or TEMP. When you kill right process, the Win 7 Internet Security 2012 window will close.
Win7 antispyware has been removed but i cant use internet, admin help…
How can i acess the internet? the win7 has been removed but cant access internet
Disable proxy server in your browser. There might be other parasites that mess with your internet connection, so do a full system scan.
I got this issue and but GodDame big trouble its not letting me to load my Windows it gets that restarted again. Also I tried Safemood, safemood with command prompt but still not loading windows I get blue screen memory issue. what should I do to get this resolved. So atleast I could copy my data.
Im wondering…
I was in this pickle awhile back while i was reading a collectible guide for Gears 3,suddenly it kicked me from IE then this WIN7 Internet Security 2012 scared the living fecal matter off of me…i looked carefully at its “warnings” and noticed 4 grammatical errors(these dudes dont make those)soo i figured it was a virus.It didnt let me use IE,access my Comp nor my un-install features soo i decided to use the Trial Norton and boom twas gone…but is it?
Back to my first statement…Im wondering,does Norton’s Trial do the trick? Do i have to purchase the program to be kept safe?
Luis D. It should, just run updates. Norton Trial might protect your PC for short while, but you should get full antivirus after trial expires.
My HP has a recovery manager, I keep it updated once a month. If your computer has a recovery system use it. I got this stupid WIN7 Internet Security Virus tonight. I was able to log into safe mode(on a restart press the F8 key).One of the menu options is to restore to a previous date.
I actually did a refresh Wed of last week. I clicked on that Wed date and it took about 5 minutes. I’m now back in action!
I got this by clicking on a link on the Dish Network site! CRAZY! Hope this helps everyone!
@Admin Thanks!
Btw i have been reading that Norton is a pain to un-install(i have avg premium bought after reading about this norton issue)is this true? Any suggestions?
Luis D. Keep single antivirus only, even if it is AVG 🙂 When there is time to update, research which antivirus is best by your parameters. Overall, Kaspersky scored in tests pretty well last year. For Malware removal, Bit Defender and PC tools scored the best in av-comparatives.
Nothing is happening even if i change the date ahead and again open my laptop it shows the same. Is there is any other way like anti-malware or something to remove it.
and its asking for registration e-mail id also.
I had malwarebytes on my computer before I got the virus.
So I just restarted my comp in safe mode and removed the detected internet security virus. I hope that was it. so far so good.
All I see is a black screen!!! Doesn’t matter what mode I use HELP!!!
Use another PC to download and burn avira boot scanner. Scan with it. If this does not work, give a call +1-888-334-2444 or PC repair time.
I got the same problems as many others before. I thank you for the tip to set the calender in futer time. So I work with windows defender and AVL to get this bloody virus out. Hope it will work. W’ll give report later