Attention! Your web page request has been cancelled.

“Attention! Your web page request has been cancelled.” is listed as one of browser hijacker that will be planted by rogue program Antivirus 7 on victims computer. This fake alert web page was intentionally designed to scare computer users on the status of the computer and will advise to activate the security software it is endorsing. The full message states:

Attention! Your web page request has been cancelled.
This web site refused your connection as it was reported as a malicious request. This can be caused by Viruses, Trojans or Malware found on your computer.
In order to resend your request to the website, press Resend request (please note that this action may cause a permanent block of your computer by the requested website)
In order to activate your security software, please Fix Now (recommended)

What are the Symptoms of ”Attention! Your web page request has been cancelled.” Infection?

It will modify Windows Registry and add the following entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Antivirus7”
• HKEY_CURRENT_USER\Software\EVAACD
• HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform “WinNT-EVI 25.11.2009”
• HKEY_CURRENT_USER\Software\FNULL246
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A23338A-C725-48D0-BA96-B12FDD22DD39}_is1

The threat will drop the following malicious files:

• c:\Program Files\AV
• c:\Program Files\AV\Antivirus7.exe
• c:\Program Files\Common Files\Uninstall
• c:\Program Files\Common Files\Uninstall\AV
• c:\Program Files\Common Files\Uninstall\AV\Uninstall.lnk
• c:\Program Files\Antivirus7AV
• c:\Program Files\Antivirus7AV\Antivirus7.exe
• c:\Program Files\Antivirus7AV\unins000.dat
• c:\Program Files\Antivirus7AV\unins000.exe
• c:\Documents and Settings\All Users\Start Menu\AV
• c:\Documents and Settings\All Users\Start Menu\AV\Antivirus7.lnk
• c:\Documents and Settings\All Users\Start Menu\AV\Uninstall.lnk
• %UserProfile%\Desktop\Antivirus7.lnk
• c:\WINDOWS\system32\UpdateCheck.dll
• %UserProfile%\Desktop\Antivirus7.lnk
• %UserProfile%\Start Menu\Programs\Antivirus7 Antivirus7us
• %UserProfile%\Start Menu\Programs\Antivirus7 Antivirus7us\Antivirus7.lnk
• %UserProfile%\Start Menu\Programs\Antivirus7 Antivirus7us\Uninstall Antivirus7 Antivirus7us.lnk

How to Remove ”Attention! Your web page request has been cancelled.” Manually

1. Restart your computer in SafeMode
– After Power-On the computer, just before Windows start, press F8
– From the selections, Select SafeMode

2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
– Click Start > Run
– Type in the field, regedit
– Navigate and look for the registry entries mentioned above and delete if necessary

3. Delete malicious files that the threat added:
– Base on the given location above, browse and delete the file
– If no location is given, click Start>Search> and search for the files.
– If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.

4. Scan computer with Antivirus Program
– Update antivirus program
– Scan computer and delete all detected threats.

How to Easily Remove Attention! Your web page request has been cancelled.

1. Download and run Removal Tool to remove this threat.