How to remove Win 7 Anti-Virus 2011

Wednesday, February 23rd, 2011 at 7:24 am
Home » Rogue Antispyware » Win 7 Anti-Virus 2011

Win 7 Anti-Virus 2011 description

Win 7 Anti-Virus 2011 is a fake security application targeting gullible people. It presents itself as a virus remover while Win 7 AntiVirus 2011 is malware distributed via trojans. Do not expect Win7 AntiVirus 2011 to protect your Windows; it’s only meant to gain a purchase.

Avoid downloading Win7 Anti-Virus 2011 if you have a choice! Unfortunately this infection may sneak upon PC automatically. Win7AntiVirus 2011 is easy to spot as it loads tons of annoying pop-ups. It fabricates warnings such as infection alerts and system scan reports. Do not trust messages loaded by Win 7 Anti-Virus 2011. The program is deceptive and it should be removed as soon as possible.

Win 7 Anti-Virus 2011 is a Rogue Antispyware software

How to manually remove Win 7 Anti-Virus 2011

To remove Win 7 Anti-Virus 2011 spyware you must block Win 7 Anti-Virus 2011 sites, stop and remove processes, unregister DLL files, search and delete all other Win 7 Anti-Virus 2011 files and registry utility. Follow the Win 7 Anti-Virus 2011 detection and removal instructions below.

The most typical software removal method is to remove Win 7 Anti-Virus 2011 by using "Add or Remove Programs" service. However there may be hidden Win 7 Anti-Virus 2011 files, running processes and registries in your computer, so Win 7 Anti-Virus 2011 may recreate all other files after reboot.

Win 7 Anti-Virus 2011 manual removal instructions

Stop and remove Win 7 Anti-Virus 2011 processes:
[random].exe Read more how to kill Win 7 Anti-Virus 2011 processes

Locate and delete Win 7 Anti-Virus 2011 registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'
HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon "(Default)" = '%1' = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile "(Default)" = 'Application'
HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "IsolatedCommand" - '"%1" %*'
HKEY_CLASSES_ROOT\.exe\DefaultIcon "(Default)" = '%1'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile "Content Type" = 'application/x-msdownload'
HKEY_CLASSES_ROOT\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"'
Read more how to delete Win 7 Anti-Virus 2011 registry entries
Download RegistryBooster 2010 to scan errors caused by Win 7 Anti-Virus 2011

Detect and delete other Win 7 Anti-Virus 2011 files:
%AllUsersProfile%\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Local\[random].exe
%AppData%\Local\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Roaming\Microsoft\Windows\Templates\t3e0ilfioi3684m2nt3ps2b6lru
%Temp%\t3e0ilfioi3684m2nt3ps2b6lru

We strongly recommend you to use spyware remover to track Win 7 Anti-Virus 2011 and automaticaly remove Win 7 Anti-Virus 2011 processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , , , , ,

80 Responses to

Win 7 Anti-Virus 2011

  1. Nick Carter

    Thank you! I just went through and did your registry edits by hand (even though I know nothing about registries) and it worked. I was able to get my antivirus software to run and then detect and delete the remnants of the virus.

    Reply

  2. adams kwasi

    i have this win 7 aniti-virus on my system plz help me how i can remove it don’t understand dis code u have placed here

    Reply

    zlsoccerman Reply:

    Right below the block with the registry data in it, there is a link that says “Read more how to delete Win 7 Anti-Virus 2011 registry entries”. If you view that it will give you detailed information on how to delete the required files

    Reply

  3. Kaeli

    This virus won’t even let me get into my browser to try this and i have no idea what to do. Any suggestions?

    Reply

    Darren Reply:

    So, what I did, was: if you know the 3 random letters e.x. “%UserProfile%\Local Settings\Application Data\[random 3 letters].exe” /START “%1″ %*’ If you know your three random letters, open up task manager, end (random 3 letters).exe and then, if you’re using vista or windows 7, right click run as admin on your Internet explorer or Mozilla firefox and then, you should be able to have it running.

    Reply

    ethan Reply:

    i did this and it worke for about 5 mins then the 3 lettered exe poped back up and the internet explore again quit working

    Reply

    Rony Reply:

    Right click on ANY program and choose Run as Administrator. It should open virtually any program.

    Reply

  4. venkatesh kumar

    i have found Win 7 Anti-Virus 2011 in my computer which give alert & disturb my work on internet. so i was given order for purches through my credit card.that time i don’t know it’s a fake site ,i would like to know what can i do now…………thankyou

    Reply

    Luciana Reply:

    You can call your bank and explain the situation, they should be able to cancel the payment. And you can use manual removal guide or any decent anti-spyware to delete Win 7 Anti-Virus 2011 from your PC.

    Reply

  5. BEn

    What if I just clicked on the file and that stupid window with all the “infections” pops up but I dont’ do anything other than close out the windows and dont purchase the product. Do I still need to delete or remove anything, or download the removal tools?

    Reply

    Luciana Reply:

    Well, if the Win 7 Anti-Virus 2011 pop-ups are still on your screen or if your web browser is redirected to websites that sell Win 7 Anti-Virus 2011, that indicate that infection is still on your computer.

    Reply

  6. acclivity

    Thank you, I could not find all the registry entries you mention, but after deleting about a dozen, I was able to get into System Restore (which had been blocked) and hence remove remaining traces.

    Reply

  7. Rick

    I am new to this computer thing and I clicked on the Win 7 by accident and not sure how to go about getting rid of it.I have read the insturctions but not sure how to do or where to go to start the process of getting rid of this thing.

    Reply

    Luciana Reply:

    If you don’t feel comfortable with deleting Win 7 Anti-Virus 2011 on your own, please, use any reputable antispyware.

    Reply

    joe Reply:

    I can not do anything! Even in safe mode, win 2011 still pops up. I need some help!!!

    Reply

  8. Shannon

    It got me…. Im that guy now. I paid for something I dont even have now. Im not smart when it comes to computers… I generally think that people are good. Well jokes on me. Im on another computer right now because this virus thing wont even let me online. I dont get these codes or where to find them…. Im lost…help!

    Reply

    Molly Reply:

    Open up your command prompt – it may be in system tools or accessories. Type REGEDIT and enter – that will let you edit the registry.

    Reply

  9. Derek

    I tried to remove the content manually but either a) the file above wasn’t in my regestry or b) it said that I couldn’t delete the file. Suggestions?

    Reply

  10. Steve

    Browsing Tip: You may not be able to open your internet browser normally because of this software, but if you go to a website from any windows explorer window, you’ll be fine… a temporary work around. Good luck.

    Reply

  11. Mahi

    Thank you!! This just worked, fantastic!!

    Cheers!
    -Mahi

    Reply

  12. natalie

    HELP I am in trouble!!! I can’t do anything on my computer its taken over.. I am on my blackberry trying to fix my computer!! The anti whatever it is has taken over
    Please help

    Reply

    Mike Reply:

    I think I know what you mean Natalie. I had the same problem. If your computer is windows 7, and you do a hard shutdown (hold down power key, which technically not good for your comp, but that’s how I did it) and turn your computer back on, it should give you an option to run in safe mode. Go in safe mode, go to control pannel (in safe mode control panel is pretty much all that works) and system restore. I’d recommend the earliest restore point, but at least restore to a point before you had the antivirus. Hope this helps.

    Reply

    Ashley Reply:

    Yes it does help thank u

    Reply

    bruce Reply:

    yep, hard shutdown, startup in safe. Then go to the control panel and system restore to earliest startpoint. This worked for me and THANK YOU for the post.

    Reply

  13. Bob

    yo does this really work cause im not really a trust kind of guy after Win 7

    Reply

    K.C. Reply:

    It really does work – I had to use two computers (one that was infected and the other to read this site) and I managed to do a system restore (see notes from number 12) and tah-dah! I am now installing a new virus scanner and can actually go back on line! Thank god for this website – I did NOT want to visit the geek squad over this nonsense!!

    Reply

    Mm Reply:

    yeah the repair place closest to me was gonna charge $35 for a diagnostic fee and $65/hour to fix it. this saved me so much time and money

    Reply

  14. Diane

    Thank you! I followed this and it took care of the problem. Excellent advice!

    Reply

  15. CJ

    it actually blocks Microsoft Security Essentials and other pre-existing anti-virus programs. wow so now i must waste my life fixing this **** thing…

    Reply

  16. Oscar

    When starting your computer, right before Windows starts to load you can press F8 and you get a menu of startup options (repair, safe mode etc..), choose Repair Computer (or similar) and you get to choose system restore from there. I restored to a point 2 days ago, rebooted normally and everything was fine. To be sure I ran an antivirus scan with my normal scanning software (MSE) and found a trojan. I deleted it and hopefully everything is okay now.

    Reply

  17. nicole

    OSCAR HELP!!! ONE OF THE OPTIONS TELLS US TO TYPE IN THE PASSWORD??? I DONT KNOW IT. IS IT A PASSWORD THAT GATEWAY MADE UP?

    Reply

  18. Michelle

    Someone please help! I’m on my phone because Win 7 home security won’t even let me on the internet. I tried removing programs that looked suspicious but it wouldn’t let me delete them unless I allowed them to make changes to my hardware. I didn’t download or pay for it but its still all over my computer.

    Reply

    Mike Reply:

    go on your computer and run it in safe mode, then system restore to a point where you didn’t have the antivirus. Then install a free antivirus (do some research so you know it’s legit) and an anti-spyware, and run those, if it is still there then the anti-spyware thing will detect it. Hope this helps.

    Reply

    Kim Reply:

    I did a system restore (had to do it twice for some reason) and it worked the second time! Thanks so much for all the help on this site.

    Reply

  19. Mike

    How convenient that all of the viruses they say are there come up at once (like, twenty at once) and are all in system 32, which they know everyone has. Can’t believe I fell for that… But I fixed it with a sys restore.

    Reply

    Peter Reply:

    Best part is I noticed the first popup and told my roommate not to tough the computer till I got back so I could remove it with the registry files and NOOO… he goes and uses the comp and clicks clean infections calls me and says umm… I think I clicked a wrong button… YAY!

    Reply

  20. Blake

    “Gullible people” seems rather harsh. I thought I was a pretty smart computer user; I have never had a virus ever. But this was VERY legit-looking. It had the little pop-ups in the bottom-right corner of the screen, the window looked like it belonged, and I didn’t download any shady software, didn’t click any ad window, didn’t open any weird emails. Also, I am unfamiliar with the software on this computer (it was my computer at work, not my personal computer), so it TOTALLY fooled me.

    Reply

    adam Reply:

    blake its not that he means youre a fool for getting the virus he means its meant to trick people into actually thinking its a real antivirus and not a virus.

    Reply

    Peter Reply:

    Often times such as this virus you can tell if its not legit by how horrible the resolution on the icons are. However they reason the often work is that they look very legit. Dont worry Blake we dont think any different of you.

    Reply

  21. Loren

    Worked great. Just be careful you are deleting exactly what is said. i got punchy and deleted something i wasn’t supposed to. The Malware was gone but I couldn’t open any .exe files. It took me a while to figure out how to get back into the registry and fix what i deleted. But i finally got it and everything is ok. thanks for the help.

    Reply

    kelsey Reply:

    so when you were deleting this virus do you remember what it was under? i dont want to delete the wrong exe file

    Reply

    Molly Reply:

    I did the same thing with the EXE stuff. How did you fix it – I haven’t been able to run RegEdit as a result!

    Reply

  22. Tanner

    This site was very helpful in removing this. My wifes Windoze 7 system was infected and luckily she thought it was suspicious that an anti-virus product was asking her to register at the same time it was informing her of problems – many problems. She new that the anti-virus product on her system was Microsoft’s Security Essentials and it was registered and should not have any notices like this. The registry changes listed here were perfect and the soyware had disabled Microsoft Security Essentials. I tried safe mode before finding the registry data here and in safe mode tried running Microsoft Removal Tool – it did not find anything. After booting in safe mode and making the registry changes I was able to reboot and I then tried to run Microsoft Security Essentials – Found it was disabled and tried to enable and could not load the service. I had to reinstall it. After a reboot it ran and I updated to latest definitions and ran a FULL scan – still waiting on completion. Thanks again for the great information.

    Reply

  23. Frank Scheffler

    I will give this a try

    Reply

  24. Marilynn

    With Vista or Windows 7 you can hit start, type into the search bar rstrui, then when it comes up, right click on it and select “run as administrator.” That will let you into system restore.

    Reply

  25. rahul

    deleting files worked. Thanks.

    Reply

  26. Terri

    Got into system restore and it keeps running. Has been initializing over 10mins. Any suggestions?

    Reply

  27. luke

    I have gone into safe mode and gone to control panel>system restore but it says I don have an restore points – this happened to me already a month back and I followed the instructions and the system restore worked and I used microsoft security essentials to check any viruses and the computer was clean – now I have no restore points to correct the problem – help!

    Reply

  28. Fiona

    I used Ctrl-Alt-Del to start task manager, ended the process [3 random letters].exe, then I could run regedit (which was blocked before), then I followed the instructions about deleting the values listed above. Worked a treat! I am truly grateful, thank you to whoever worked it out.

    Reply

  29. Craig

    I just used System restore. It worked fine and I’ve had no problems o.o

    Reply

    John H Reply:

    Ditto, thank goodness there was an automatic restore point!

    Reply

  30. Joe

    Thank you, it really worked, my friend though that i am Bill Gates going into the registry and deleting useless applications and registries :D again thank you for helping us

    Reply

  31. Missy

    The easiest way to remove Win 7 Anti-Virus 2011 malware is to buy a Mac!

    Reply

    Luciana Reply:

    There are much less malware targeting Mac computers, but that doesn’t not make them bulletproof.

    Reply

    Missy Reply:

    Such as? Why is it when I go to Best Buy there is an entire section of the store devoted to anti-viral software and none of them are for the Mac operating system, only Windows? Surely if there was a need for it someone would have jumped on it by now, especially when there is money to be made.

    Anyways, I don’t mean to hijack the thread. Glad that there is someone out there who knows how to deal with this stuff and is willing to share it.

    Reply

    Peter Reply:

    Macs=equal inferior and less capable. The only reason there few mac viruses is because there are not enough being used in society. Just like viruses target gullible people just wait until there are enough macs out there to do some major damage by a virus because everyone thinks they are safe lol.

    Again sorry for thread hijacking.

  32. pissed off

    Uhh idk what you people are talking about I followed these directions to the letter and now guess what… my computer is in even WORSE shape than before… I don’t really even know why I’m commenting here, because if this site is truly fraudulent, this comment will be deleted before it can warn anybody. I am truly disappointed with your “help”

    Reply

    Luciana Reply:

    Well, your guess wasn’t correct. I am sorry your computer is not working properly, but I am sure something can be done to delete the leftovers of the malware you got. Could you describe your problems more specifically?

    Reply

  33. kitcho

    My new laptop HP ENVY 10 taken over by Win 7 virus and crippled my browers and I have to recover the whole operating and program ll over again. Now it is okay and able to run it. The great thing is tht I did not have any file or picture on it, since I just bought it. It was just a mess to tell you the truth.

    Reply

  34. Kelly

    Access your System Restore tool either from the start up menu or from your control panel and pick a date earlier than when you first started having problems to restore your computer settings.

    Takes about 20 minutes but got rid of every trace of the malware and no more annoying popups preventing me from browsing.

    Reply

  35. shewa

    my HP laptop windows 7 is totally infected of win 7 virus.when i turn on my laptop and the thing you can see in the screen is black blank screen.so im not able to see or to operate any programs.could you pls help me to fix my laptop…plss

    Reply

  36. Callum

    OMG you are gods the gut in the shop wanted £50 to fix my computer i used your guide with little knowledge and successfully removed it.
    My only comment is picture may be easier to follow, and the second box of files to delete wasn’t clear so you may want to edit that.
    other than that thanks a bunch!

    Reply

  37. Kjb

    I got my laptoP into Safe Mode but it still could’t find the .exe file to do a system restore. And then the pop up came up again and started scanning and “finding infections” in safe mode.

    I have no idea what these random characters are that are referred to in this thread at the top, to get rid if it manually.. I can’t get into the Internet. How else can I get rid of it?

    Reply

  38. Yuki

    I followed this guide and deleted the registry files listed, but not all of them showed up.
    And I can’t open my programs anymore.
    What do I do?

    Reply

  39. chris hansen

    Hey can someone please help me out.

    I have the Win 7 virus thing. If i put my computer in safe mode and even try to access the system restore function, the virus wont let me. It is a very smart virus. I ran a full virus scan with Avast and it didnt do it.

    I am a college student and i really need my laptop….This virus is the smartest thing i have ever seen i give it credit for that./…

    Reply

    K.C. Reply:

    Hey there,
    So I JUST got my computer cleaned by following the directions under the #12 above…I put my computer in safe mode, opened up the control panel – I couldn’t find the “system restore” button immediately, so I used the “search” feature at the top right and looked for it. I then proceeded to pick 06/15/2011 as my restore date…since I know the problems started after then. Leave a message if you need more help, I’ll try and help the best I can (although I’m a super newbie at this!)
    -K.C.

    Reply

  40. VM

    Thank you! I used the system restore and it worked. I was not able to figure out the regedit like others and would appreciate pics (job aid). But the system restore worked fine. Thanks!

    Reply

  41. ally lloyd

    God Bless You All. I read everything and tried a few. It finally worked with the last one from VM. Thank you all. Have a wonderful 4th of July!!!

    Reply

  42. Fever

    I got this last week and it was all over my computer. I just saved all the documents I could ,and re-installed windows. It seemed to do the trick. Even if you delete out the registry it seems to replicate. Itook over the firewall ,internet explorer,etc. . I don’t even know how it appeared on the computer in the first place. If you do re-install make sure it’s a clean install. Hope this helped someone.

    Reply

  43. Susi

    Hi,

    I got this antivirus on my computer. I tried to delete the files by deleting all the entry manually. however it did not work. I was not able to delete the entry
    %AllUsersProfile%\t3e0ilfioi3684m2nt3ps2b6lru
    %AppData%\Local\[random].exe
    %AppData%\Local\t3e0ilfioi3684m2nt3ps2b6lru
    %AppData%\Roaming\Microsoft\Windows\Templates\t3e0ilfioi3684m2nt3ps2b6lru
    %Temp%\t3e0ilfioi3684m2nt3ps2b6lru

    as i not sure were they are located.

    i run the removal tool, but surprise in order to correct and delete the antivirus i was asked to pay.

    any other tip, please?

    I run the

    Reply

  44. Seema

    Thank you! Restoring the system worked good

    Reply

  45. Drew B. (Clovis, CA)

    Thanks a ton for all of the advice here; saved my life.
    After learning (crash course, literally) about the Registry Editor, I was finally able to delete the key components and vanquish the foe with (God’s help) and the System Restore.
    Thanks!

    Reply

  46. lizc

    I am not computer savvy but I did it!! System recovery worked! Thank you all for the great advice!

    Reply

  47. Ana

    When I first started to expeirence the dreaded Win 7 Anti Virus pop ups, I created a new admin profile and deleted the infected one. The profile is working fine but my fire wall is turned off. It gives me a error message when I try to turn it back on. I tried to delete its registry entires but there is only about 5 of them and when I right click on them the delete option is not available.
    When I click to the space to the right it says “default” and there is a option available when I right click to delete. These are the five entries that I see.
    HKEY_CLASSES_ROOT
    HKEY_CURRENT_USER
    HKEY_LOCAL_MACHINE
    HKEY_USERS
    HKEY_CURRENT_CONFIG
    The message to the right of these entries does not change when I click on the different HKEY’s. Should I delete this message to the right? Is this the virus? What should I do?

    Thanks

    Reply

  48. Matt

    Hey guys, if u wanna figure out where the actual application is located follow these steps.
    1. Wait until A WIN 7 security messages pops up from the actual application.
    2. In task manager, right click on the task name and click “go to process.”
    3. Right click on the process and view its property’s. Find the location and then delete the file. This will remove the application.

    NOTE: The virus has is own add ons and dll files that you may have to hunt down after you delete the application.

    Reply

  49. Rishabh

    I found that the easiest way to remove win 7 antivirus, because it sometimes blocks all ur apps from running (even taskmgr), is to go into Safe Mode and do a System Restore. Choose a restore point which dates prior to the installation of win 7 antivirus.

    Reply

  50. Rachel

    Thank you thank you thank you. I got my antivirus to work but am running your spyware doctor just in case i missed anything lol

    Reply

  51. Elyse

    Ok this stupid Win 7 has torn my computer to shreads! I really scared me when it said it found like 26 viruses and I didn’t know what to do! It started to block me from using my programs and would pop up every minute! I’m trying the program suggested above because nothing else worked! Has anyone else used the program? Is this a good idea? What do I do?!?!

    Reply

  52. Zayah

    My brother got this problem… I entered a fake code to redeem it… If i had it i would share.

    Reply

  53. Darren

    The #’s provided do not work, I tried both of them.I also tried system restore and no go as the Win 7 virus would not allow access.

    I purchased Spyware Doctor and problem solved. This is the 2nd time I have had this issue and Spyware Doctor has rectified the problem. Hope this info helps you ,,,,,,

    Reply

Leave a Reply

Download does not start? Try a mirror download here