Win7 AV is a Rogue Anti-Spyware program. Win7 AV downloads and installs itself via a Trojan automatically without the users’ knowledge and consent. When a user downloads Win7 AV and runs a scan, the program reports false scan alerts. The user is then prompted to pay for a full license of the application in order to remove the threats.
Type: Misleading Application
Name: Win7 AV
Website: gcounter.cn (Site already blocked by Google)
Risk Impact: Medium
Systems Affected: Windows 7
Behavior: Win7 AV is a misleading application that may give exaggerated reports of threats on the computer.
Manual Win7 AV Removal
Win7 AV processes:
Win7Browser.exe
Win7 AV.exe
Win7 AV DLLs:
VmDetectLibrary.dll
svhostqt.dll
svhostesl.dll
sbhostcl.dll
Other malicious Win7 AV files:
Win7Browser.exe
Win7 AV.exe
VmDetectLibrary.dll
svhostqt.dll
svhostesl.dll
sbhostcl.dll
Automatic Removal
Download and install SUPERAntiSpyware and Malwarebytes Anti-Malware. Both security programs come with free versions.
I recommend that you run multiple passes of SUPERAntiSpyware and Malwarebytes Anti-Malware.
It’s important that you keep your security programs up to date. I highly recommend downloading the WOT (Web of Trust) add-on for IE and/or Firefox. The WOT add-on warns you about risky sites before you click.
Related Articles
How to Remove Major Defense Kit
How to Remove Desktop Security 2010
How to Remove AdWare Pro Rogue Software
Security Tool Installs as a Firefox and Flash Update
Beware of Antispymv.com a Malicious Website
How to Remove MedicCop Rogue AntiSpyware
How to Remove Antivir Solution Pro
These rogue, bogus AV’s are a major problem with many of the computers I repair around here. This garbage is getting thrui just about every security program out there. There is no reall 100% Anti Virus that is completely bullet proof these days.
Little handy set of files, program call “Rkill”, that can sometimes kill these rogue AV’s off, allowing you to open, update and run your system security tools to scan and remove.