How to manually remove Total Security

To remove Total Security spyware you must block Total Security sites, stop and remove processes, unregister DLL files, search and delete all other Total Security files and registry utility. Follow the Total Security detection and removal instructions below.

The most typical software removal method is to remove Total Security by using "Add or Remove Programs" service. However there may be hidden Total Security files, running processes and registries in your computer, so Total Security may recreate all other files after reboot.

Pop-ups loaded by Total Security are identical to security alerts displayed by ESET NOD32 antivirus. Be careful and don’t mistake Total Security for a real security program. Here are some examples of Total Security alerts:

“Privacy Violation alert!
WARNING Total Security Alert! Privacy Violation alert! Total Security detected a Privacy Violation. A program is secretly sending your private data to an untrusted internet host. Click here to block this activity by removing the threat.”

“System files modification alert!
WARNING Total Security Alert! System files modification alert! Some critical system files of your computer were modified by malicious program. It may cause sytem instability and data loss. Click here to block unauthorized modification by removing threats.”

“Internet Explorer Warning – visiting this web site may harm your computer.
Most likely causes: The website contains exploits that can launch a malicious code on your computer; suspicious network activity detected; there might be an active spyware running on your computer.”

“WARNING! 41 threats found!!!
Harmful software (malware) or racking cookies have been detected during the last scan. It is highly recommended to remove it from your computer.

x Lost Documents and Settings

x Permanent Data Loss

x System not starting up

x System Slowdown and Crashes

x Loss of Internet Connection

x Infecting other computers on your network”

“New database update is available
WARNING Total Security Alert! Automatic updating is necessary to get you system protected in real time against new and emerging viruses, worms, and troyans. Regular updating is needed to prevent your PC from latest virus threats that can lead to system slowdown, freezes, crashes, and data loss.

Total Security manual removal instructions

Block Total Security sites:

powerfullantivirusproduct.com

antivirusonlineproscan.com

remove-all-malware.com

worldsbestantivirscan.com

yourbrowserprotection.com

explorersecuritysuite.com

Stop and remove Total Security processes:

tsc.exe

Sc2C21UvvM.exe

Locate and delete Total Security registry entries:

Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}

HKEY_CURRENT_USER\Software\1FD92E3F7C34799BFB075C41DA05D1FE

HKEY_CLASSES_ROOT\CLSID\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "1FD92E3F7C34799BFB075C41DA05D1FE"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"

Search and unregister Total Security DLL libraries:

winsource.dll

Detect and delete other Total Security files:

winsource.dll

tsc.exe

Sc2C21UvvM.exe

TSC.lnk

Help.lnk

Registration.lnk

Uninstall TSC.lnk

C:\Documents and Settings\All Users\Application Data\[random numbers]\[random numbers].exe

Read More

How to remove Mega Antivirus 2012

Rogue anti-spyware refers to anti-spyware/antivirus software of questionable value. Rogue anti-spyware may not be proven to protect your computer from spyware, may popup fake alerts or create many false positives about your PC being infected, or may use scare tactics to try to get you to purchase the application. Rogue anti-spyware software may be installed by a Trojan, come bundled with other software, or install itself through web browser security holes. While it is fairly rare, some rogue anti-spyware is created and distributed by known spyware or adware companies, and the rogue anti-spyware may install spyware or adware itself.
Often when you’re infected with rogue anti-spyware like Mega Antivirus 2012, you’ll see a false popup security alert like this:

How to delete Mega Antivirus 2012 files in Windows XP/Vista/7:

• Click your Windows Start menu, then click “Search.”
• A pop up will ask, “What do you want to search for?” Click “All files and folders.”
• Type a Mega Antivirus 2012 file in the search box, and select “Local Hard Drives.”
• Click “Search.” Once the Mega Antivirus 2012 file is found, delete it.
• The files are 

                     %WINDIR%addonsaddon.exe

                     %WINDIR%addonsbaselicense.pwd

                     %WINDIR%addonsma2012.exe

                     %WINDIR%install.exe

How to stop Mega Antivirus 2012 processes:

• Click the Start menu, select Run.
• Type taskmgr.exe into the the Run command box, and click “OK.” You can also launch the Task Manager by pressing keys CTRL + Shift + ESC.
• Click Processes tab, and find Mega Antivirus 2012 processes.
• Once you’ve found the Mega Antivirus 2012 processes, right-click them and select “End Process” to kill Mega Antivirus 2012.
• The process are 

                                  addon.exe

                                  ma2012.exe

How to remove Mega Antivirus 2012 registry keys:

Note:Backup your registry before you edit it. 

• Click the Start menu, and click “Run.” An “Open” field will appear. Type “regedit” and click “OK ” to open up your Registry Editor. In Windows 7, just type “regedit” into the “Search programs and files” box in the Start menu.
• Registry Editor opens as a two-paned window: the left side lets you select registry keys,the right side shows the values of any selected registry key.
• To find a Mega Antivirus 2012 registry key, select “Edit,” then select “Find,” and in the search bar type any of Mega Antivirus 2012 ‘s registry keys.
• When the Mega Antivirus 2012 registry key appears, to delete the Mega Antivirus 2012 registry key, right-click it, and select “Modify,” then select “Delete.”
• The registry entries are

                       HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun Policies = “C:WINDOWSaddonsaddon.exe”

                      HKCUSoftwareMicrosoftWindowsCurrentVersionRun HKCU = “C:WINDOWSaddonsaddon.exe”

                     HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun SystemStart = “C:WINDOWSaddonsma2012.exe”

                    HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun addons = “C:WINDOWSaddonsaddon.exe”

                    HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorerRun Policies = “C:WINDOWSaddonsaddon.exe”

How to delete Mega Antivirus 2012 DLLs:

• Open the Start menu, and click “Run.” Type “cmd” in Run, and click “OK.” (In Windows 7, just type “regedit” into the “Search programs and files” box in the Start menu.)
• To change your current directory, type “cd” in the command box, press “Space,” and enter the full directory where the Mega Antivirus 2012 DLL is located. If you’re not sure where the Mega Antivirus 2012 DLL is located, enter “dir” in the command box to display a directory’s contents. To go one directory back, type “cd ..” in the command box and press “Enter.”
• When you’ve found a Mega Antivirus 2012 DLL, type “regsvr32 /u SampleDLLName.dll” (e.g., “regsvr32 /u jl27script.dll”) and press “Enter.”

How to restore your homepage?

• Select Start menu > Control Panel > Internet Options > General.
• Type your preferred home page’s URL (e.g., “http://www.homepage.com”).
• Click “Use Default,” “Apply,” and “OK.”

Read More