Antispymega.com (or Antispymega.net) is a fake website which publishes a rogue security program to make money. This program is none other than well known Antivir Solution Pro. If you reach the Antispymega.com site unintentionally than it is likely that your computer might have been infected by Antivir Solution Pro. Although the site states that it is one of the best tool to protect your computer from any malware; it is all crap.
Basically, whatever is present in your front is all fake. Antispymega.com or Antivir Solution Pro is not at all capable of removing any malware from your computer. On the other hand, this is a actual virus by itself. It usually gives you a scam warning messages in the popup stating your computer risks and asking for to perform the complete scanning of your computer. Simply ignore it.
If however by chance you get infected with this forge program them simply follow the below procedure to remove it from your computer:
1. Delete %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string].exe file.
2. Delete the below registries:
HKEY_CURRENT_USER\Software\AVSolution
HKEY_CURRENT_USER\Software\AVSuitE
HKEY_LOCAL_MACHINE\SOFTWARE\AVSolution
HKEY_LOCAL_MACHINE\SOFTWARE\AVSuitE
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter “Enabled” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” =”1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = ““
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random string]“
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random string]“
Bookmarks