Wednesday, November 23, 2011

Remove AV Protection 2012, fresh clone of Cloud Protection deletion

AV Protection 2012 is a simple remake of malware released earlier. Both programs represent one of the few families still extending at the eve of 2012.
The name of the above forerunner of the infection under review is almost indistinguishable against that of the software in question: AVProtection 2011.
The only visible difference between the two malwares is in the name, and it is that the forerunner’s name is more often written in one word and its final digit is 1 instead of 2.
Removal of AV Protection 2012 is strongly recommended or else the program would drown you in its popups. It shows practically the same graphics as AVProtection2011 so that you can consult previous posts of this security blog for more details.
Click here to get rid of AV Protection 2012 as a malicious counterfeit produced by slight modification of its too much notorious predecessor.

AV Protection 2012 screenshot:




AV Protection 2012 manual removal directions:
Delete infected files:
%AppData%\{random}\
%AppData%\ldr.ini
%AppData%\svhostu.exe
%AppData%\{random}\AV Protection 2012.ico
Delete infected registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “{random}.exe”
HKEY_CURRENT_USER\Software\AV Protection 2012

No comments: