Friday, October 5, 2012

Win 7 Home Security 2013 virus. Removal guide.

Win 7 Home Security 2013 is a new rogue that can infect your system nowadays. As always we tell our users to be very careful inside the web and pay more attention to the links and sites you enter and to the program you work on the internet with.

Win 7 Home Security 2013 penetrates to your machine with one main goal of stealing your money. It can do it by fooling you. At first it scans your system (of course the scanning is fake) and shows you the results of it. And you will be provided with the list of threats it supposedly finds in your machine. But do not panic at once. All those threats are totally fake and you do not have any of them in your system.

Removal guide of Win 7 Home Security 2013 virus:

Launch your PC in Safe mode with Networking. Press Ctrl+Alt+Del to open the Task manager to stop the progress of Win 7 Home Security 2013 virus. Because the name will be changed fast, it will be show with different name. Delete all the files related to Win7 Home Security 2013 virus.

Delete Win 7 Home Security 2013 registry entries:

  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = ‘”%LocalAppData%\kdn.exe” -a “%1″ %*’
  • HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%LocalAppData%\kdn.exe” -a “%1″ %*’
  • HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%LocalAppData%\kdn.exe” -a “%1″ %*’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%LocalAppData%\kdn.exe” -a “C:\Program Files\Mozilla Firefox\firefox.exe”‘
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%LocalAppData%\kdn.exe” -a “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%LocalAppData%\kdn.exe” -a “C:\Program Files\Internet Explorer\iexplore.exe”‘
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Win7 Home Security 2013 “AntiVirusOverride” = ’1′
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Win7 Home Security 20133 “FirewallOverride” = ’1′

No comments:

Post a Comment