Home Malware Programs Rogue Anti-Virus Programs Win 7 Antivirus Plus 2013

Win 7 Antivirus Plus 2013

Posted: December 5, 2012

Threat Metric

Ranking: 5,797
Threat Level: 2/10
Infected PCs: 8,354
First Seen: December 5, 2012
Last Seen: October 15, 2023
OS(es) Affected: Windows

Win 7 Antivirus Plus 2013 Screenshot 1Win 7 Antivirus Plus 2013 is one of the recently-identified variants of the Multirogue 2013 branch of FakeRean: a family of fake anti-malware scanners that display misleading alerts and request money to remove fake malware infections. Like other FakeRean scamware programs, Win 7 Antivirus Plus 2013 may look like an anti-virus program, but harms your PC's safety instead of helping it, by blocking programs, hijacking your browser and changing your system settings. SpywareRemove.com malware experts recommend that you use PC security methodology to disable Win 7 Antivirus Plus 2013 and then use anti-malware programs to delete Win 7 Antivirus Plus 2013, which has no beneficial features that are worth paying for and should be considered an active danger to any Windows PC.

The Reasons to Avoid Win 7 Antivirus Plus 2013's Security Addition

Win 7 Antivirus Plus 2013 is designed to look like an anti-virus scanner and even includes fake system scans along with a colorful collection of (always inaccurate) pop-up alerts to enhance its anti-virus aesthetics. However, Win 7 Antivirus Plus 2013 is incapable of detecting or removing viruses or any other type of malware, and all of Win 7 Antivirus Plus 2013's definitive features only serve the purpose of encouraging victims to purchase its worthless registration key.

Besides Win 7 Antivirus Plus 2013's recurring fake infection warnings, SpywareRemove.com malware researchers also have observed other problems that are directly associated with Win 7 Antivirus Plus 2013 infections, including:

  • Programs may be blocked by Win 7 Antivirus Plus 2013 through several methods (including modifying the Registry to delete program-related entries or terminating memory processes that are related to programs).
  • Your browser may be redirected away from PC security-related sites to fake error pages.
  • Win 7 Antivirus Plus 2013 also may disable important security features such as Windows Security Center's notification function.

Subtracting Win 7 Antivirus Plus 2013's Security Negatives from Your Computer

Win 7 Antivirus Plus 2013 and related malware (members of the FakeRean and Multirogue 2013 families) often are distributed by malicious sites that host Blackhole Exploit Kit-based attack. SpywareRemove.com malware experts consider updating all of your software, avoiding spam-related links and having anti-malware software with web security features to be the best means of protecting your computer from BEK attacks that may install Win 7 Antivirus Plus 2013. Similar types of fake anti-malware products that also may be installed by such methods include Antivirus 2008 Pro, Antivirus XP 2008, Windows Antivirus 2008, Vista Antivirus 2008, PC Clean Pro, Antivirus Pro 2009, Rogue.Vista Antivirus 2008, AntiSpy Safeguard, ThinkPoint, Spyware Protection 2010, Internet Antivirus 2011, Palladium Pro, XP Anti-Virus 2011, CleanThis, XP Security 2012, XP Home Security 2012 and AntiVirus PRO 2015.

If your PC does become infected with Win 7 Antivirus Plus 2013 or a related type of scamware, SpywareRemove.com malware researchers suggest that you use Windows Safe Mode to disable any malware that may be open (including Win 7 Antivirus Plus 2013). Once Win 7 Antivirus Plus 2013 is disabled, deleting Win 7 Antivirus Plus 2013 is as easy as running a system scan with an updated and trustworthy brand of anti-malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%UserProfile%\Desktop\Win 7 Antivirus Plus 2013.lnk File name: %UserProfile%\Desktop\Win 7 Antivirus Plus 2013.lnk
Mime Type: unknown/lnk
Group: Malware file
%UserProfile%\Start Menu\Programs\Win 7 Antivirus Plus 2013\Win 7 Antivirus Plus 2013.lnk File name: %UserProfile%\Start Menu\Programs\Win 7 Antivirus Plus 2013\Win 7 Antivirus Plus 2013.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Win 7 Antivirus Plus 2013"

Additional Information

The following URL's were detected:
desktopdefendersurveys.com
The following messages's were detected:
# Message
1Privacy alert!
Rogue malware detected in your system. Data leaks and system damage are possible. Click here for a free security scan and spyware deletion.
2Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.
3System Hacked!
Unknown program is scanning your system registry right now! Identity theft detected!
Details
Attack from 125.237.54.211 port 2336
Attacked port: 45182
Threat: Trojan-Spy.HTML.Backfraud.jk
4System hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.
5Threat Info: Trojan-Downloader.BAT.Ftp.ab
Risk: Low
Description: This script for a Windows FTO client can download other executable files without the knowledge or consent of the user.
It may be used to download Trojan programs to the victim machine.
6Tracking software found!
Your PC activity is being monitored. Possible spyware infection. Your data security may be compromised. Sensitive data can be stolen.
Prevent damage now by completing a security scan.
7Win 7 Antivirus Plus 2013 Alert
System hacked!
Unknown programs is scanning your system registry right now! Identity theft detected!

Loading...