Mega Antivirus 2012 is a rouge anti-virus program that looks and acts like a real anti-virus program when in fact it is a scam. Users get Mega Antivirus 2012 usually from a website’s banner ad that informs the users of possible infections on the machine. Once downloaded the program will pop-up saying it needs to run scans because of a possible infection. Mega Antirus 2012 will do a scan which will return with results stating the computer is infected and should be cleaned. If users attempt to fix the problems found via Mega Antivirus 2012 they will be instructed they much pay for the full version to get rid of the infections. The warnings and infections should be ignored and were created by this program.

Manual Removal of Mega Antivirus 2012: To begin removal of Mega Antivirus 2012 shut down the PC and restart in safe mode. To get to safe mode Press F8 during start up if timed correctly your given the choice to boot into safe mode, highlight it using the arrow keys and press enter. During start up if you see the windows logo it means you did not press F8 in enough time and you’ll need to restart and try again if you wish to get into safe mode. Once in safe mode begin removal of the following files in their locations listed.

• %AppData%\<login_name>log.dat
• c:\WINDOWS\install.exe
• c:\WINDOWS\addons\
• c:\WINDOWS\addons\addon.exe
• c:\WINDOWS\addons\ma2012.exe
• c:\WINDOWS\addons\base\
• c:\WINDOWS\addons\base\license.pwd

Mega Antivirus 2012 Registry Entries that should be removed:

• HKEY_CURRENT_USER\Software\hun
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{45O3M0BQ-217X-LR5A-LU8X-18207F677R23} “StubPath” = ‘C:\WINDOWS\addons\addon.exe Restart’
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run “Policies” = ‘C:\WINDOWS\addons\addon.exe’
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “HKCU” = ‘C:\WINDOWS\addons\addon.exe’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run “Policies” = ‘C:\WINDOWS\addons\addon.exe’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “addons” = ‘C:\WINDOWS\addons\addon.exe’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “SystemStart” = ‘C:\WINDOWS\addons\ma2012.exe’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rundll32.exe “Debugger” = ‘C:\app1.exe’
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “Debugger” = ‘C:\app1.exe’

Please Contact Us Here for more information on Mega Antivirus 2012 Malware/ Scareware
Need help removing Mega Antivirus 2012 Malware/ Scareware or other PC problems? E-Mail Us Here

Be Sociable, Share!

•