Feb 17

Threat Description:

Mega-scan-pc-new14.com is a bad site we advise you to keep clear of. It has been noticed to promote a blacklisted program posing as a rogue anti-spyware application; it’s called Security Essentials 2010. The site we are analyzing here has quite a luring appeal and attempts to look very much like My Computer Windows GUI. Probably the worst thing about Mega-scan-pc-new14.com though is the proven fact that people get there in a forcible way, i.e. through a browser redirect triggered by a trojan horse which is a tiny, almost imperceptible but essential component of Security Essentials 2010 fraud. Having driven you to the predefined URL, the hijacker displays a popup alert at the very beginning stating that you have some unsafe activity on your workstation. Then, the site will initialize the so-called scan procedure which is anything but real malware checking. Mega-scan-pc-new14.com certainly displays scan results in the end claiming to have detected a bunch of trojans, worms and other potentially hazardous and privacy-infringing malicious entities. Then, the hijacker will definitely and by all means recommend you to download, install and eventually purchase Security Essentials 2010 software for virus defense purposes. Unfortunately, the pushed software will do your PC no good, not to mention that it’s helpless in terms of taking care of computer infections. We advise that you remove Buy-security-essentials.com hijacker if you spotted this prankster in your system.

Find out if your PC is infected with Mega-scan-pc-new14.com hijacker and affiliated malware (Security Essentials 2010):

Mega-scan-pc-new14.com Screenshot:

Mega-scan-pc-new14.com

How to remove Mega-scan-pc-new14.com hijacker manually:

To perform manual removal of this malware, you should do the following:

Delete the related corrupt files:

  • %Documents and Settings%\[UserName]\Desktop\Security essentials 2010.lnk
  • %Documents and Settings%\[UserName]\Start Menu\Security essentials 2010.lnk
  • %Documents and Settings%\[UserName]\Application Data\[randomnumbers].exe
  • %Program Files%\Securityessentials2010\
  • %Program Files%\Securityessentials2010\SE2010.exe
  • %Temp%\[randomnumbers].exe
  • %Temp%\[randomnumbers].dll
  • %System%\smss32.exe
  • %System%\winlogon32.exe

Remove the affiliated registry entries:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

Please, note that manual removal of Mega-scan-pc-new14.com hijacker is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic Mega-scan-pc-new14.com hijacker removal tool below:

Download Mega-scan-pc-new14.com Hijacker Removal Tool

Leave a Reply