How to remove Win7 AV
Win7 AV description
Win7 AV is a fake anti-spyware application which pretends being legitimate PC security tool. This is a scam and should be avoided. Malware seeks to trick user into believing their computer is infected and must be healed with its “licensed” version. Do not fall for this blatant scam.
Malware enters the system via trojan which comes through computer’s vulnerabilities. Once installed it will display false system security warnings and then will prompt you to buy a “full” version of this program to remove threats that don’t even exist. Here’s one of the fake warnings:
Warning: visit this site may harm your computer.
This website may contain elements from the site gcounter.cn, which appears to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer. For detailed information about the problems with these elements, visit the Google Safe browsing diagnostic page for gcounter.cn
Ignore all rogue warning messages and do not purchase any program Win7 AV offers. This is malicious and fraudulent. Choose reputable anti-spyware application and get rid of Win7 AV upon detection.
How to get rid of Win7 AV
This infection can be removed using Spyware Doctor.
Spyware Doctor is widely valued as one of the best AntiSpyware programs available to protect you from Win7 AV and the latest internet security threats. If your computer is infected with Win7 AV we strongly recommend automatic spyware scanner.
How to manually remove Win7 AV
To get rid of spyware such as Win7 AV you need to remove processes, search and delete registry keys, DLL and other Win7 AV related files from your computer.
Take Note: The manual process of removing spyware from your computer is difficult and puts you at risk of damaging your computer. We advise using our automatic Win7 AV remover.
- Uninstall Win7 AV from Control Panel
Start > Settings > Control Panel > Add/Remove Programs. Double click to uninstall. - End these Win7 AV processes:
windiskdefend.exe
Win7Browser.exe
Win7 AV.exe
To stop processes press Ctrl + Alt + Del or click Start > Run > type "taskmgr". Select malicious process in the list and click "End Process" button. -
Unregister Win7 AV DLL files:
windefWebModule.dll
Win7Common.dll
VmDetectLibrary.dll
svhostqt.dll
svhostesl.dll
sbhostcl.dll
Interop.SHDocVw.dll
To unregister DLL click Start > Run > type "regsvr32 /u PATH_TO_FILE/FILE.dll" -
Delete Win7 AV registry entries:
HKLM\SOFTWARE\Classes\CLSID\{C9C42510-9B41-42c1-9DCD-7282A2D07C61}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{C9C42510-9B41-42c1-9DCD-7282A2D07C61}
HKLM\SOFTWARE\Win7 AV
HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\windiskdefend
HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Windows Disk Defender
HKLM\SYSTEM\CurrentControlSet\Services\windiskdefend
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\w7avf
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Win7 AV
To open registry editor click Start > Run > type "regedit".
Warning! Manual registry entries editing may cause damage to your system.
Download Uniblue RegistryBooster 2010 to scan for registry errors. -
Search and delete these Win7 AV related files:
%ProgramFiles%\Win7 AV\
%ProgramFiles%\Win7 AV\AxInterop.SHDocVw.dl
%ProgramFiles%\Win7 AV\base001.dat
%ProgramFiles%\Win7 AV\base002.dat
%ProgramFiles%\Win7 AV\base003.dat
%ProgramFiles%\Win7 AV\Interop.SHDocVw.dll
%ProgramFiles%\Win7 AV\sbhostcl.dll
%ProgramFiles%\Win7 AV\svhostesl.dll
%ProgramFiles%\Win7 AV\svhostqt.dll
%ProgramFiles%\Win7 AV\VmDetectLibrary.dll
%ProgramFiles%\Win7 AV\Win7 AV.exe
%ProgramFiles%\Win7 AV\Win7Browser.exe
%ProgramFiles%\Win7 AV\Win7Common.dll
%UserProfile%\Desktop\Win7 AV.lnk
C:\Windows\System32\windefWebModule.dll
C:\Windows\System32\windiskdefend.exe
C:\Windows\System32\windiskdefend.InstallState
-
Block Win7 AV malicious domains:
Win7av.com