Home Malware Programs Rogue Anti-Spyware Programs Win 7 Security 2011

Win 7 Security 2011

Posted: November 15, 2010

Win 7 Security 2011 is rogue security software that alters its name to better fit the operating system it tries to infect. Win 7 Security 2011 may block various applications and hijack your web browser, in addition to alerting you about infections that actually aren't even on your computer. Since Win 7 Security 2011 is considered a security threat for your PC, you should remove Win 7 Security 2011 by using suitable anti-malware products in combination with reliable malware-fighting techniques like Safe Mode.

Fake Security with Real Threats

Win 7 Security 2011 is one tentacle of a much larger infection with an incredibly variable name. On systems that run Windows 7, you may also see Win 7 Security 2011 under the title of Win 7 Anti-Spyware 2011, Win 7 Internet Security 2011, Win 7 Security 2011, Win 7 AntiVirus 2011, Win 7 Total Security 2011, Win 7 Home Security 2011 and many other names. Not only is the '2011' suffix not always present, but Win 7 Security 2011 can also change its name to XP Security 2011, Vista Security, and so on, to make you think that it's legitimate software.

Win 7 Security 2011's most readily-noticeable symptom is its tendency to create fake desktop alerts and other urgent pop-ups. These pop-ups will tell you that your system is infected with messages like the following:

Attention: DANGER!
ALERT! System scan for spyware, adware, trojans and viruses is complete.
Win 7 Security 2011 detected 33 critical system objects.

Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.

System danger!
Your system security is in danger. Privacy threats detected. Spyware, keyloggers or Trojans may be working the background right now. Perform an in-depth scan and removal now, click here.

Privacy threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.

You can safely roll your eyes at all attempts by Win 7 Security 2011 to put a fear of keyloggers into you, since Win 7 Security 2011 can't detect viruses or other malware threats to your PC. These false positives only have one use, and that's to get you to give Win 7 Security 2011's home site your credit card information. Since purchasing Win 7 Security 2011 has no benefits and will put your personal information in danger, you should avoid buying a registration key for Win 7 Security 2011, regardless of all else.

Getting Back Win 7 without Win 7 Security 2011

Win 7 Security 2011 may also cause other problems that make it difficult to remove even if you're ready to delete Win 7 Security 2011 for good:

  • Win 7 Security 2011 may set your browser to use a proxy server, which allows Win 7 Security 2011 to hijack your online destinations. Be suspicious if your homepage is changed, you see strange errors when attempting to access safe websites, or if you're redirected to Win 7 Security 2011 from the search results of popular search engines.
  • Win 7 Security 2011 can also stop applications from being run, a high-priority threat that tends to be reserved for security-related software and Windows maintenance utilities. If you find yourself unable to access Task Manager, the Registry Editor or anti-virus scanners, then Win 7 Security 2011 may be blocking you.
  • You can't trust your eyes when it comes to detecting Win 7 Security 2011, since Win 7 Security 2011 will place entries for itself into the Registry that are linked with the standard Windows startup routine.

Switching to Safe Mode, which can be done on any Windows-based PC, can let you avoid Win 7 Security 2011's automatic startup and in turn dodge its other attacks. The registration key '1147-175591-6550' works for several versions of Win 7 Security 2011, and may be useful if you need to disable Win 7 Security 2011 to get into a position where deletion is feasible.

You can delete Win 7 Security 2011 yourself if you really need to do so, but relying on a suitable anti-malware application is usually more efficient. Win 7 Security 2011 is a well-known threat, and any high-quality system scanner, once updated, should be able to kick Win 7 Security 2011 out of your system.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%Local SettingsApplication DataopRSK %UserProfile%Local SettingsApplication Datapw.exe %UserProfile%Local SettingsApplication DataMSASCui.exe %UserProfile%AppDataLocalopRSK %UserProfile %AppDataLocalpw.exe %UserProfile%AppDataLocalMSASCui.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*HKEY_CLASSES_ROOTpezfileHKEY_CLASSES_ROOTpezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*HKEY_CURRENT_USERSoftwareClassespezfileHKEY_CURRENT_USERSoftwareClassespezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe"HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-modeHKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesInternet Exploreriexplore.exe"HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1"HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1"

Additional Information on Win 7 Security 2011

  • The following messages's were detected:
    # Message
    1 Privacy threat!
    Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.
    2 System danger!
    Your system security is in danger. Privacy threats detected. Spyware, keyloggers or Trojans may be working the background right now. Perform an in-depth scan and removal now, click here.
    3 Stealth intrusion!
    Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.
    4 Attention: DANGER!
    ALERT! System scan for spyware, adware, trojans and viruses is complete.
    Win 7 Security 2011 detected 33 critical system objects.

28 Comments

  • Evelyn says:

    hi, what about if you can't get firefox or anything else to work? How can i get this program in to the computer that needs the win 7 remove?
    thank you

  • Marie says:

    I tried using the information above but none of the processes were on my maptop and i could not delete the regitrys. I have managed to remove the windows 7 security 2011 virus by deleting my mcaffee, not sure how it worked, just setting up my security again now.

  • Mark says:

    I think this little bugger has renamed It's files/entries making it a little more difficult to find. Does anyone know anything about an application called "Steam"?

  • Cn says:

    Steam is a program that allows for the sharing and downloading of video games on your computer, among other things.
    I will uninstall my mcaffee and see if it solves anything. I can't browse the internet with any of my 5 browsers, however, so intalling the program is not an option. I have to use my Zune for internet now, though, which sucks.
    But it has renamed all its files, so it's not easy to get rid of.

  • Callum says:

    none of my things work cant find the program. ill try to check for mcaffe. would restoring it to a later date remove the program?

  • froggie says:

    Win 7 Security 2011 created the process zen.exe called steam when it infected my pc. none of the registry entries listed above where there, I am unable to run any EXE's and my system restore points have gone, also Mcafee seems to have been circumvented (is supposed to detect this?). It seems to be different everyime it infects?

  • Brian says:

    @Callum

    My computer somehow got infected with this annoying virus, and that is what I had to do to remove it.

    I restored it to a day earlier and everything seems to be fine so far.

  • Lynne says:

    I have tried to use system restore to go back to an earlier date but I can't do that. I have also tried to get into safe mode but I am unable to do that either. I have AGV i wonder if deleting that will help?

  • bill smith says:

    ak1nf1nerLet have these [REMOVED WORD]ers KILLED then maybe the next guy will think before he triies to [REMOVED WORD] us all...

    They have illegally installed something on all our computrers and they should pay US.

    I want to know where these payments go so we can hunt them down.... I will co over to their office or home and shove my computer as far up their ass until they beg for the pain to stop................................................

  • bainesarcher says:

    No idea how my laptop got infected with this but its damn anoying, pops up on startup, prevent access to internet, nothing i can do seems to disable it, i assumed the list of infections were fake after all, who actually names their viruses \"trojan\" or \"worm\" lol. trouble is i cant get the manual method for removal to work and the processes listed dont appear in the task manager list. also, restoring to an earlier date dosent work because when i try to open the system restore program i get \"Windows cannot find `C:\\windows\\system32\\rstrui.exe` Make sure you typed the name correctly and try again\" So i assume this has disabled that option too, Any more ideas?

  • nobody says:

    Try to resotre your computer to older date, this it will work 2

  • Les says:

    ok about 2 days ago i got this virus and i searched all over the interent (using my other computer) and all i found was guides to manual removal and such which to me (a person who doesn't know a great deal about computers) were total jibberish. Also the guides that weren't for manual removal were all just simply downloading antiviruses, which ofcourse didn't work as the virus stops you running programmes.

    now i was telling my friend about it and he told me that he had the same virus just weeks before and told me how to get rid of it. When he told me i couldn't believe how easy it was, it sounded too good to be true.

    1. press start and go to 'accesories'
    2.open the folder 'system tools'
    3.and click 'system restore'

    now it took about a minute or two to open.

    basically the rest is pretty straightforward

    4.pick one of the dates that were before when the virus infected your computer (i just picked a date from about 2 weeks before)
    5.and then i let it reboot

    it took about 20 minutes and the shut down and restarted.

    i logged in as usual (skeptical if it would work)

    but to my delight it did, i went straight onto internet explorer and downloaded a few recommended free anti viruses and so far no sign of the virus coming back.

    hopefully this works for the rest of you because i know what it was like having this virus and to say it was a nightmare would be an understatement.

    good luck (:

    ps. please post a comment if this worked so others can see how to fix it ...

  • Heath Treacy says:

    Thankyou, thankyou.. i spent hours trying to work out how to get rid of this... Followed your instructions & worked great!!

  • alejandro says:

    muchas gracias mister les por la solucion al problema, me funciono de maravilla, thanks again.

  • kisha says:

    How can i get rid of this virus and get my money back is there a number I can call

  • George atha says:

    When Windows 7 2011 so called security system blocked my use of IE and access to System Restore through System Tools, I discovered that I could access System Restore through Maintainence. I restored to two days ago and everything was back to running condition with no more troublesome blocks or popups of phony warnings.

  • Jeff says:

    @les thank you. that worked for me.

  • anonymous says:

    I used the restore feature it fixed the problem completely, the virus is completely gone along with this other one called MS security or something. If you're wondering where you can find this feature go to: "Start menu"/ "Control Panel" and make sure you're in all Control Panel Items then look for "Recovery" double click on it and look for "Open System Restore" click on it and click next then look for a time you wish to restore your files to, this will restart your computer and bring it back to the previous time you selected. Hope this works.

  • Becky says:

    Thanks Les, it worked !

  • Karem says:

    Restoring my system worked!!!!! thank you so much for telling us how to do this!!!!!!!!!!!!

  • George says:

    The system recovery did the trick!! Thank you!!

  • asz says:

    im telling you right now..l had win 7 for a full week. i was just on youtube doing nothing but watching a video on dirtbikes, and all of the sudden, everything closed out and win 7 popped up. luckily, i used webroot anti virus, and now im fine.

  • Kelly says:

    What an annoying and highly irritating program. I first got it today and have spent most of my day trying to get rid of it. Trying the system restore now, Had to go in through maintenance as I also got an error when I tried going in through the start up menu. Wish me luck.

  • Isabella says:

    Win 7 Security is so annoying! I hope I can get rid of it! I got it a few days and was going to pay money but I decided to search it first and I will defiently not buy it and I will try my best to get rid of it asap! It doesn't let me do anything!

  • Isabella says:

    I did it Les\'s way and it is working 🙂 I am so happy read this and do this, it is much simpler:

    ok about 2 days ago i got this virus and i searched all over the interent (using my other computer) and all i found was guides to manual removal and such which to me (a person who doesn\'t know a great deal about computers) were total jibberish. Also the guides that weren\'t for manual removal were all just simply downloading antiviruses, which ofcourse didn\'t work as the virus stops you running programmes. now i was telling my friend about it and he told me that he had the same virus just weeks before and told me how to get rid of it. When he told me i couldn\'t believe how easy it was, it sounded too good to be true. 1. press start and go to \'accesories\' 2.open the folder \'system tools\' 3.and click \'system restore\' now it took about a minute or two to open. basically the rest is pretty straightforward 4.pick one of the dates that were before when the virus infected your computer (i just picked a date from about 2 weeks before) 5.and then i let it reboot it took about 20 minutes and the shut down and restarted. i logged in as usual (skeptical if it would work) but to my delight it did, i went straight onto internet explorer and downloaded a few recommended free anti viruses and so far no sign of the virus coming back. hopefully this works for the rest of you because i know what it was like having this virus and to say it was a nightmare would be an understatement. good luck (: ps. please post a comment if this worked so others can see how to fix it ...

  • greg says:

    I paid them two years fees, they removed their lock at once. But they gave me no receipt.

  • shahzad says:

    @ Anita: Thank you so much...best and simple solution...worked like charm!!!

    Follow her instruction:

    "could not restore system from the main menu but if you go to your control panel you can click find anb fix problems and in the lower left corner of that window click recovery, this will take you to system restore"

  • Aaron Lewis says:

    I just like the helpful information you provide. I was able to remove that win 7 spyware junk after registering your malware scanner spyhunter. Thought It would not work at first but then it detected. Decided it was worth my time to register and give it a try. Home Run guys! Thx!

Loading...