Remove Win 7 Protection 2013 (uninstall guide)

What is Win 7 Protection 2013? This question, no doubt, is in the minds of many users today. Some think it is a program developed by Microsoft Inc. as one of its security packages. Other tend to believe that this is certain independent security tool. The true picture we get about this scam is after we thoroughly investigate the issue about it. So, let us test how this application works on the PC.

It came on our computer after we clicked some links from Twitter or Facebook. Immediately it installed itself (by the way, without our permission). This is quite strange, isn’t it? It immediately started arranging various system scans and within about 3-4 seconds completed them. Quite fast, right? Well, at this point we started doubting the fact that this is some legitimate anti-virus. It though reported various fake infections.

Such information was not something unusual for us, in fact, we sort of predicted that Win 7 Protection 2013 is not something decent. Moreover, it told us that we need to buy its license to have those fake infections removed. There are many free anti-viruses (like MSE and others), whereas this rogue says we must buy its fake anti-virus protection. No doubt, there is something wrong with it, so it is not a good idea at all to put our trust into this malicious application. We thus removed it using the powerful anti-malware program GridinSoft Trojan Killer. If your system is infected with Win 7 Protection 2013 scam please do the same thing without hesitation.

Win 7 Protection 2013 similar removal video guide:

Win 7 Protection 2013 step-by-step removal instructions from GridinSoft Trojan Killer anti-virus Lab

Step 1.

Run GridinSoft Trojan Killer. Click Win+R and type the direct link for the program’s downloading.

If it does not work, download GridinSoft Trojan Killer from another uninfected machine and transfer it with the help of a flash drive.

Step 2.

Install GridinSoft Trojan Killer. Right click – Run as administrator.

Run as administrator

IMPORTANT!

Don’t uncheck the Start Trojan Killer checkbox at the end of installation!

Checkbox

Manual removal guide of Win 7 Protection 2013 virus:

Delete Win 7 Protection 2013 files:

  • %LocalAppData%\[rnd_2]
  • %Temp%\[rnd_2]
  • %UserProfile%\Templates\[rnd_2]
  • %CommonApplData%\[rnd_2]

Delete Win 7 Protection 2013 registry entries:

  • HKEY_CURRENT_USER\Software\Classes\.exe
  • HKEY_CURRENT_USER\Software\Classes\.exe\ [rnd_0]
  • HKEY_CURRENT_USER\Software\Classes\.exe\Content Type application/x-msdownload
  • HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
  • HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon\ %1
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\ “[rnd_1].exe” -a “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\IsolatedCommand “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\ “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\IsolatedCommand “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\ Application
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\Content Type application/x-msdownload
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\DefaultIcon
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\DefaultIcon\ %1
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open\command
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open\command\ “[rnd_1].exe” -a “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open\command\IsolatedCommand “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas\command
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas\command\ “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas\command\IsolatedCommand “%1″ %*

Leave a Comment

*