Tuesday, February 22, 2011

Remove Mega Antivirus 2012 – Get Rid Of MegaAntivirus 2012 fake scan

Faking security activities by rogue antispyware is a show performed in practically the same way in user’s interpretation. There is always an info flow of scaring kind mentioning certain threats. However, the show behind the curtains is performed in different way. The easiest way is to make no imitation of scan process and simply popup messages prepared in advance without any detecting routine. This is the most popular way. Another option is to create entries to be listed in the scan results and progress tables. The entries are usually mere junk files.
Get rid of Mega Antivirus 2012 adware that fakes virus scan in both of the above ways. Mega Antivirus 2012 removal as a system disinfection step and free scan are available with all-in-one solution here.

MegaAntivirus 2012 screenshot:

Mega Antivirus 2012 free removal tool:


MegaAntivirus 2012 manual removal guide:
Delete infected files:
%WINDIR%\addons\addon.exe
%WINDIR%\addons\base\license.pwd
%WINDIR%\addons\ma2012.exe
%WINDIR%\install.exe
Delete infected registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies C:\WINDOWS\addons\addon.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\HKCU C:\WINDOWS\addons\addon.exe
HKCU\Software\WinRAR SFX\C%%WINDOWS%addons C:\WINDOWS\addons
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{45O3M0BQ-217X-LR5A-LU8X-18207F677R23}\StubPath C:\WINDOWS\addons\addon.exe Restart
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SystemStart C:\WINDOWS\addons\ma2012.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\addons C:\WINDOWS\addons\addon.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\Policies C:\WINDOWS\addons\addon.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rundll32.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rundll32.exe\Debugger C:\app1.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe\Debugger C:\app1.exe

No comments: