123seminarsonly.com

 
Manual Uninstallation of Norton Products
Use Office programs with the Norton AntiVirus Office plug-in
Norton Bootable Recovery Tool (NBRT)
Screenshots of Norton 360 Version 3
Custom Search


Win 7 Internet Security 2012
     

Kindly find the removal instructions for the new Spyware “ Win 7 Internet Security 2012 “. In the Case of Winodws Vista it is known as Vista Internet Security 2012. In Case of Windows XP it is known as XP Internet Security 2012

 Synopsis :

          Win 7 Internet Security 2012 pretends being an powerful antivirus but it itself in fact is completely a virus. Just like any other rogue, Win 7 Internet Security 2012 spreaded via the usual rogue distribution methods which include Trojan infections via browser hijacker websites. Once installed, Win 7 Internet Security 2012 will display a fake scanning and annoying popups stating that your computer is serious infected. While all of them are designed by Win 7 Internet Security 2012 and should be ignored.

Kill the following Processes from the Task Manager

[random.exe]   (ex: hcy.exe, xjw.exe, jie.exe) 

Delete the following Infected files:

C:\users\<user name>\appdata\local\[random].exe  

Make sure you Back Up your Windows Registry Before Editing the Registry. You have to take some Extra Care While Deleting the registry. Follow the steps How to back up and restore the registry in Windows

Delete the following Registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\1311663257

 

Delete all entries except [ “%1”  %* ] in the below locations :

 

HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” =

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\""

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\""

HKEY_USERS\S-1-5-21-393598541-1170550020-13146906-1001\SOFTWARE\Classes\.exe\shell\open\command\""

 

Delete all entries of the infected file only.

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe"'
Delete only : '"%LocalAppData%\kdn.exe" -a Keep "C:\Program Files\Mozilla Firefox\firefox.exe"'


HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'
Delete only : '"%LocalAppData%\kdn.exe" -a Keep "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'


HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe"'
Delete only : '"%LocalAppData%\kdn.exe" -a Keep "C:\Program Files\Internet Explorer\iexplore.exe"'

- Delete Temp / Prefetch

- Reset the IE web settings

- Run the disk cleanup

- Disable the System Restore, Reboot the PC

- Enable the System Restore and make sure system is stable with no popup and symptoms of infection.

 

 
Related Topics :
 
 
 
 
 
 
Windows 2000/98/NT
Windows XP
Windows Vista
Windows 7
Windows Server
Windows Update
Internet Explorer
Microsoft Office
Wireless
Router
Modem
Printer & Scanner
Hardware Tips
Internet Explorer
Mozilla Firefox
Google Chrome
Opera
Microsoft Office
Drivers
Emails
Security Softwares
 
 

© 2011 123seminarsonly.com All Rights Reserved.