Windows: How to Remove “Win 7 Antivirus 2012”

Big warning to you all. I just got hit by a virus on my Windows 7 machine. The virus is called: “Win 7 Antivirus 2012”. (it's a virus that pretends to be a antivirus software)

First i describe how to remove it for those of you came here for that. Then i blog about how i got this virus and my PC experiences.

What's “Win 7 Antivirus 2012”

It's a virus that pretends to be a anti-virus software. It basically screws up your computer, prevents you to run any app, and kept asking with a pop-up dialogue for you pay by credit card for a bogus anti-virus software.

Windows: How to Remove “Win 7 Antivirus 2012”

The virus cames with several different names. e.g. {“Win 7 Antivirus 2012”, “Win 7 Security 2012 ”, “XP Antivirus 2012”, …}. To remove it, i recommend following this article at:

Remove Win 7 Security 2012 (Uninstall Guide) (2011-12-06) By Grinler. @ Source

That article will ask you to download some tools. Do it. I've used their product in the past years. I trust them. It is free.

Just in case that site is being hijacked or sometimes in the future no longer exists or sold with changed info, the following is a guide on how to remove from my own experience.

• Download “FixNCR.reg” at and run it. This will fix the registry. Wait for the program to finish. It should take no more than 2 minutes.

• Download “RKill” at and run it.

“RKill” will terminate the rogue program that's running. Some rogue program prevents RKill to run. So, if you double click on RKill and it won't run, try download the same program but different name from the site above.

• Download “Malwarebytes' Anti-Malware” at

“Malwarebytes' Anti-Malware” is a anti-virus software, one of which i trust. It's shareware.

Install it, follow all default options, then run it. Allow it to update when it starts. Then, do a full scan. (May take 1 hour.) After scan, remove the virus detected. After it's done, it'll create a log file listing the removed rogue software.

Malwarebytes screenshot.

My Experiences of Virus on Windows

read more at Perm URL:

Popular posts from this blog

11 Years of Writing About Emacs

does md5 creates more randomness?

Google Code shutting down, future of ErgoEmacs