Win 7 Total Security 2011 (Win7 TotalSecurity2011) Virus Removal Guide

Virus Type: Rogue Security Application
Threat Level: 8 / 10

Win 7 Total Security 2011 is a new fake computer antivirus application. Win 7 Total Security 2011 claims to provide a variety of computer protection services; these services include computer scan, internet security, personal security, proactive defense, and a computer firewall. Win 7 Total Security 2011 is one of many new fake applications; these fake antivirus programs are a large family of fake antivirus programs which are similar in functionality and look, with the main difference being a change in name. Win 7 Total Security 2011 main executable is generally a series of three random letters which are generally all lower case letters; this executable is similar to AV.exe and AVE.exe, which are the main executable of previous clones of this virus. Win 7 Total Security 2011 will modify the registry; therefore, the registry must be fixed before removing the main executable file. Win 7 Total Security 2011 will modify the registry to set the fake antivirus program to run when any other executable file is run. The comments here and comments here may provide insight into the successful removal of Win 7 Total Security 2011. These two pages have roughly a combined 160 comments. The main executable is generally a hidden file; therefore, it is important to turn on hidden files in the file explorer in order to see the hidden main executable file. This feature can be found in the folder options under “Hidden files and folders.” In Windows 7, search “Show hidden files and folders” in the Windows Search Bar to find folder options.

Below is our recommended removal tool for Win 7 Total Security 2011. The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

download

Win 7 Total Security 2011 will block the user from viewing webpages by redirecting each website to a page they have designed. However, the user can still access direct download links. To download the removal tool, please type in the address below in Internet Explorer.

http://www.virusremovalguru.com/download.php

It is still possible to use Internet Explorer. In the video below, we have detailed how to access the web in Internet Explorer.

Win 7 Total Security 2011 Removal Tip - Win 7 Security 2011 will generally block computer applications from running. To bypass Win 7 Security 2011, right click on the application file which you hope to run and select “Run as administrator.” This should allow the user to install removal software in order to successfully remove Win 7 Total Security 2011.

Win 7 Total Security 2011 Removal Tip #2 - Win 7 Security 2011 will make web browsers, such as Internet Explorer, Mozilla Firefox, and Google Chrome unusable by showing the following page below when attempting to browse the web. When the user attempts to visit another website, it will replace that website with the image shown below.

The best method to run the browser is to right click on Mozilla Firefox or Google Chrome and select “Run as administrator.” This method will not work with Internet Explorer. This should allow the user to browse the web and download removal software for Win 7 Security 2011. If Mozilla Firefox or Google Chrome is not installed, move the installation file on a removal storage device such as a flash disk.

If you are unable to run the removal tool, or are unable to run any programs in general, you may also need to stop the processes associated with Win 7 Total Security 2011 with task manager. If task manager has been blocked by Win 7 Total Security 2011, try using Process Explorer.

Win 7 Total Security 2011 is part of a family of fake antivirus programs. This specific family of fake antivirus programs was started in February 2010; Newer revisions were released in April 2010, November 2010, and March 2011. This family of fake antivirus programs is unique in that the fake programs can change names from operating system to operating system. For example, the fake program will display the name as Win 7 Total Security 2011 when it infects systems running Windows 7. However, when the fake program infects a computer running Windows XP, it will change its name to XP Total Security 2011; the virus will change into Vista Total Security 2011 if it infects a computer running Windows Vista. Notice that the only main difference in the change of name is the name of the operating system; all programs have Total Security 2011 as the end part of the name. This was possibly done to make the program have more similarities with the operating system and convince the user that the fake antivirus program is associated with their computer.

Win 7 Total Security 2011, like many other fake antivirus programs, will create a series of warnings and pop ups in order to scare the user into purchasing the fake program. For example, Win 7 Total Security 2011 will warn the user about Trojan-BNK.Win32.Keylogger.gen, which is a fake virus, in order to scare the user. Some of these warnings which are created by Win 7 Total Security 2011 can be found below.

“Privacy Threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.”

“Win 7 Total Security 2011 Firewall Alert!
Win 7 Total Security 2011 has blocked a program from accessing the internet.
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen. Private data can be stolen by third parties, including credit card details and passwords.”

“Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.”

“Windows Security Center

Win 7 Total Security 2011 reports that it is currently turned off. A firewall helps to protect your computer from potentially harmful content on the internet. Click Recommendations to learn how to fix this problem.”

Win 7 Total Security 2011 reports that it is turned off. Antivirus software helps protect your computer against viruses and other security threats. Click Recommendations for suggested actions you can take.

“Virus infection!

System security was found to be compromized. Your computer is now infected. Attention, irreversible system changes may occur. Private data may get stolen. Click here now for an instant anti-virus scan.”

“Virus intrusion!

Your computer security is at risk. Spyware, worms and Trojans were detected in the background. Prevent data corruption and credit card information theft. Safeguard your system and perform a free security scan now.”

Win 7 Total Security 2011 will also modify Internet Explorer to show the following alert listed below when the browser is opened. It will continue to show the following when visiting websites. It will essentially redirect the webpage to the following.

“Internet Explorer alert. Visiting this site may pose a security threat to your system!

Possible reasons include:

Dangerous code found in this site’s pages which installs unwanted software into your system.
Suspicious and potentially unsafe network activity detected.
Spyware infection in your system.
Complaints from other users about this site.
Port and system scans performed by the site being visited.

Things you can do:

Get a copy of Win 7 Total Security 2011 to safeguard your PC while surfing the web (RECOMMENDED).
Run a spyware, virus and malware scan.
Continue surfing without any security measures (DANGEROUS).”

Win 7 Total Security 2011 will also create a fake alert for P2P-Worm.Win32.Franvir and IRC-Worm.DOS.Loa.

It is recommended to use safe mode when removing the virus because Win 7 Total Security 2011 will generally not be able to load in safe mode. To enter safe mode, restart the computer and press F8 multiple times before the Windows screen to bring up the boot options.

Boot Menu

The safe mode with networking option will allow the user to be able to use the internet in safe mode. Win 7 Total Security 2011 can be removed by using the removal tool or by manually removing the virus.

View Win 7 Total Security 2011 Files
View Win 7 Total Security 2011 Keys

Common symptoms and characteristics of Win 7 Total Security 2011 and other rogue security programs include:
1. Win 7 Total Security 2011 is generally installed without user permission.
2. Win 7 Total Security 2011 uses pop ups and fake virus scans to scare the user.
3. Various antivirus and system programs on the user’s computer will stop functioning.

Manual Win 7 Total Security 2011 Removal – In order to manually remove Win 7 Total Security 2011, the processes associated with Win 7 Total Security 2011 must be stopped, the files associated with the processes must be removed, and the registry entries must be corrected to the previous state before Win 7 Total Security 2011 entered the computer.

Important: Before attempting to manually remove Win 7 Total Security 2011, we recommend that the user read through comments posted by other users on how they removed specific fake antivirus programs since many fake antivirus programs are similar. These comments can be found by clicking here. These comments may provide additional information which may be useful in removing Win 7 Total Security 2011. However, please use discretion since these specific comments pertain to other fake antivirus programs.

Stop Win 7 Total Security 2011 Processes (Learn How To Do This)
[random letters].exe

The executable for Win 7 Total Security 2011 will generally be a series of three characters.

Remove Win 7 Total Security 2011 Files (Learn How To Do This)
C:\Users\[username]\AppData\Local\[random letters].exe

Win 7 Total Security 2011 main executable file is generally a hidden protected system file. This is most likely done to make it harder to be found by the user. Therefore, the user will need to make changes to the view properties for viewing folders. The user will need to turn on “show hidden files” and must turn off “hide protected operating system files” in order to see these files. This feature can be found in the folder options in the view tab. In Windows 7, you can search “hidden files and folders” in the Windows Search Bar to find the folder options. To bring up the Windows Search Bar, click on the Windows logo in the bottom left hand part of the screen. It is recommended that the user turn back on “hide protected operating system files” after removing Win 7 Total Security 2011.

Remove Win 7 Total Security 2011 Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER\Software\Win 7 Total Security 2011
HKEY_LOCAL_MACHINE\SOFTWARE\Win 7 Total Security 2011
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Win 7 Total Security 2011

Remove Win 7 Total Security 2011 Startup Entry (Learn How To Do This)
[random letters].exe

Common Questions -
1. What is a computer virus? (Click Here To View)
2. How did I get this computer virus? (Click Here To View)
3. What common symptoms show that my computer may be infected? (Click Here To View)
4. What is a rogue security application? (Click Here To View)
5. What are some antivirus and antispyware programs which I can use to remove viruses and spyware? (Click Here To View)

If you have any questions or comments, please don’t hesitate to comment below. If you need any help with any of the steps, please don’t hesitate to comment below. We recommend that you follow our safety tips so that you can keep your computer clean Please Click Here to View Our Safety Tips.

Your feedback is very highly valued by others so please feel free to comment below. Please feel free to share a solution that you may have used to remove Win 7 Total Security 2011. If you have any questions on how to remove Win 7 Total Security 2011, please feel free to comment below.

This entry was posted on Friday, April 1st, 2011 at 2:43 am and is filed under Malware Removal. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.

5 Responses to “Win 7 Total Security 2011 (Win7 TotalSecurity2011) Virus Removal Guide”

jon April 3rd, 2011 at 9:10 pm

my laptop is infected with win 7 total security i am unable to use any troubleshooters my anti virus wont detect any thing and i am unable to download a new one from the internet i am getting constent popups from my anti virus saying trojans are being blocked is there a certain program i can delete to make all go away should i send it in iduno wat to do please help

sdf April 6th, 2011 at 3:26 pm

In my case I was able to run a program called Malwarebytes anti-malware. To get it to run I ‘ran as admin’ by right clicking on the exe in c: program files/malwarebyes/mbytes.exe and choosing that option…and then once you scan and remove everything using that tool you should be able to follow the steps.

Jragon April 7th, 2011 at 10:45 am

Hi,

I used MBAM to sort it out, I had to right click it and run it as an admin, then I did a flash scan, and MBAM found the virus and removed it.

Thank god for MalwareBytes anti Malware!

Leslie April 22nd, 2011 at 7:23 pm

So my laptop got infected with this virus too. It didn’t want to let me on AT ALL on the internet. I have an antivirus and it also didn’t want to register it (i tried like three times). So I logged off my computer user and went into my brothers instead. AMAZINGLY, the internet worked so I downloaded the stopzilla thing on top^ and it worked!!!:D If you don’t have another user on your computer, you should create one in control panel and do it this way. Hopefully this helped :)

Suzanne May 31st, 2011 at 11:47 am

THANK YOU! THANK YOU! THANK YOU!
Your help here worked and is very much appreciated. I downloaded and ran StopZilla as recommended and it got rid of the malware to my great relief.

I’m just so grateful!

Leave a Reply