Win 7 Home Security 2012

7 June 2011 2 Comments

Win 7 Home Security 2012 is a counterfeit and multi-named software that make itself more distinct from any other rogue programs. It was usually installed by a Trojan that is able to identify target computer’s operating system. It will be installed based on the system like Vista Home Security 2012 for Vista system and XP Home Security 2012 for XP systems. But no matter how and where it is installed, it still remains a rogue program that must be removed right away. Its occurrences will produce several annoyances like browser redirection, malfunctioned AV programs or blocking of Internet access.

Win 7 Home Security 2012 will be installed without a component on Add/Remove programs of Windows. It was intentionally installed without an option to remove unless a paid version is obtained. It will also disable any Windows functionalities such as task manager, registry editor and folder option to avoid manual removal. The only sure way to remove Win 7 Home Security 2012 virus is to download an effective and trusted anti-malware application like the one stated below. After installation, make sure that it has the latest patter files and database to catch all latest viruses that belongs to Win 7 Home Security 2012.

Screen Shot Image:

Technical Details and Additional Information:

Win 7 Home Security 2012 Is Also Detected As:
TR/Crypt.ZPACK.Gen8 (AntiVir), Win32/Cryptor (AVG), Trojan.FakeAv.MDN (BitDefender), Trojan.FakeAv.MDN (F-Secure), W32/FakeAV.NO!tr (Fortinet), Trojan.FakeAv.MDN (GData), Trojan.Win32.FakeAV.jvjs (Kaspersky), FakeAlert-Rena.bv (McAfee), Mal/FakeAV-PP (Sophos),

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Malware Behavior
It is common to all rogue security applications including Win 7 Home Security 2012 to fabricate various security alerts in order to mislead its victims. These fake alerts usually pop-up from the system tray and pretends to be a legitimate warning from Windows system. Some of the fake security warning may contain the following text:

Win 7 Home Security 2012 Alert
Critical system alert!
Unknown software is trying to take control over your system!
Details
Attack from: 178.145.22.51 port:51052
Attacked port: 54228
Threat: Email-Worm.JS.Gigger

Attention: DANGER!
ALERT! System scan for spyware, adware, trojans and viruses is complete. Win 7 Home Security 2012
detected 25 critical system objects. These security breaches may be exploited and lead to the following:
- Your system becomes a target for spam and bulky, intruding ads
- Browser crashes frequently and web access speed decreases…

Added Registry Entries:
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'

HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'

HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon "(Default)" = '%1' 
= '"C:\Users\\Local Settings\Application Data\.exe" /START "%1" %*'

HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" 
= '"C:\Users\\Local Settings\Application Data\.exe" /START "%1" %*'
Associated Files and Folders:
C:\ProgramData\ru7ndh1stry6smploiqq90saa
C:\Users\\AppData\Roaming\Local\[random 3 letters].exe
C:\Users\\AppData\Roaming\Local\ru7ndh1stry6smploiqq90saa
C:\Users\\AppData\Roaming\Roaming\Microsoft\Windows\Templates\ru7ndh1stry6smploiqq90saa
C:\Users\\AppData\Local\Temp\ru7ndh1stry6smploiqq90saa

Note: "ru7ndh1stry6smploiqq90saa" can be any random characters

Video Tutorial (Win 7 Home Security 2012 Removal)

How to Remove Win 7 Home Security 2012

Activating the Rogue Program

Win 7 Home Security 2012 will block running of any programs. It also prevents access to Internet particularly anti-virus web sites. Execution of Windows tools like Task Manager, Registry Editor and Control Panel is similarly block by the rogue program. Activating the program using the registration key below will regain access to the mentioned services.

Activation Code: 3425-814615-3990

Once activated, downloading of necessary program to scan and remove Win 7 Home Security 2012 is now possible.

Automatic Removal Procedure

1. First thing to do is to reboot the computer in Safe Mode with Networking to avoid Win 7 Home Security 2012 from loading at start-up. You may want to print this procedure as we have to restart the computer to complete the removal process.
- Restart the computer.
- Before Windows begins to load, press F8 on your keyboard.
- It will display an Advanced Boot Options menu. Please select Safe Mode with Networking.
- Windows will now start in Safe Mode.

2. Download removal software and save it on your Desktop or any location on your PC.
3. When finish downloading, double-click on the file to install the application.
4. Follow the prompts and install with default configuration.
5. Before the installation completes, you need to update the database.

6. Click Finish. Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
7. When finished updating, the tool will run. Select Perform full scan on main screen to check your computer thoroughly.
8. When scanning is finished click on Show Results.
9. Make sure that all detected threats are checked, click on Remove Selected. This will delete all files and registry entries that belongs to Win 7 Home Security 2012.
10. Restart your computer.

Note: If Win 7 Home Security 2012 prevents mbam-setup.exe from downloading. Download the software from another computer. Renaming it to something like 'anything.exe' can help elude the malware.