Remove Security Master AV. Description and removal instructions

 
Title: Security Master AV
Also known as: SecurityMasterAV, SecurityMaster AV
Type: Spyware
Severity scale:Security Master AV severity is 68  (68 / 100)
 
Security Master AV is a rogue anti-spyware program from the same family as My Security Engine and CleanUp Antivirus. As a typical fake anti-spyware program it imitates a system scan and claims that your computer is infected with malicious software. The bogus program creates harmless files on your computer and then detect those files as viruses. Finally, it asks to pay for a full version of the program to remove the infections and to make your computer more secure. Moreover, Security Master AV displays fake security warnings and and pop-ups claiming that your sensitive information can be stolen or that your PC is under attack from a remote computer. It goes without saying that you should remove Security Master AV from your computer as soon as possible. Some of the fake security alerts read:


Warning! Identity theft attempt detected
Hidden Connection IP:
Security Risk: High
Target: Microsoft Corporation Keys


Warning! Virus detected
Threat Detected: Trojan-Spy.HTML.Citifraud

SecurityMasterAV is promoted mostly through the use of Trojans, fake online scanners and other misleading websites. While running, Security Master AV will block legit antivirus and anti-spyware programs, disable task manager, registry editor and other useful system tools to protect itself from being removed. It will hijack Internet Explorer and block security related websites or redirect to various misleading websites that promote rogue security software. As you can see, Security Master AV is nothing more but a scam. If you find that your computer is infected with this bogus program please use the removal instructions below to remove Security Master AV from your computer either manually or with an automatic removal tool. If you have already purchased this fake program, then contact your credit card company immediately and dispute the charges.


Related files: tjd.tmp, tempdoc.tmp, sld.sys, sld.exe, sld.drv, runddlkey.drv, runddl.sys, runddl.dll, PE.dll, kernel32.drv, FS.sys, exec.dll, DBOLE.tmp, DBOLE.exe, CLSV.dll, ANTIGEN.dll, SMMPIBBZGHAV.cfg, sqlite3.dll, SM345d.exe, mozcrt19.dll, 16.mof, runddlkey.dll, tjd.sys, tjd.drv, std.exe, PE.tmp, PE.sys, PE.exe, PE.drv, gid.drv, FS.drv, energy.tmp, ddv.sys, ddv.dll, DBOLE.sys, CLSV.drv, cid.dll, antigen.exe, ANTIGEN.drv, cookies.sqlite, Security Master AV.lnk, vd952342.bd, SMAV.ico, SM8d7c.exe, 25.mof

Security Master AV properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Security Master AV snapshot:
Security Master AV removal

Automatic Security Master AV removal:

remover for Security Master AV

Security Master AV manual removal:

Kill processes:
SM345d.exe sld.exe DBOLE.exe SM8d7c.exe ANTIGEN.exe std.exe
Delete registry values:
HKEY_CURRENT_USERSoftware3
HKEY_CLASSES_ROOTCLSID{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOTSM345d.DocHostUIHandler
HKEY_USERS.DEFAULTSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USERSoftwareClassesSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = "1"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Security Master AV"
HKEY_CLASSES_ROOTSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "CheckExeSignatures" = "no"
Unregister DLLs:
mozcrt19.dll PE.dll runddl.dll exec.dll CLSV.dll ANTIGEN.dll sqlite3.dll cid.dll ddv.dll runddlkey.dll

Delete files:
16.mof mozcrt19.dll SM345d.exe SMAV.ico sqlite3.dll vd952342.bd SMMPIBBZGHAV.cfg Security Master AV.lnk cookies.sqlite Security Master AV.lnk ANTIGEN.dll CLSV.dll DBOLE.exe DBOLE.tmp ddv.sys energy.tmp exec.dll FS.sys kernel32.drv PE.dll runddl.dll runddl.sys runddlkey.drv sld.drv sld.exe sld.sys tempdoc.tmp tjd.tmp

Other programs to remove Security Master AV:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 26/05/10
Information updated: 21/08/10

Additional resources related to Security Master AV:

Attention: If you know or you have a website or page about Security Master AV removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Security Master AV parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by . 2010-08-21 18:08:36
"I want you crap removed from my computer NOW!!!! I did not ask for it. I am tired of it."
ROFL
Noone realy asks for malicious software, but if your realy this ignorant... You kinda did.

2. by . 2010-08-10 14:08:17
i just downloaded it. what do i do know

3. by . 2010-08-03 10:08:14
Sorry, safe mode...

4. by . 2010-08-03 10:08:35
Just reboot your pc in sage mode, go to system restauration and choose the day before you downloaded this CRAP.

5. by .. 2010-07-31 23:07:40
i just downloaded it. what do i do know?

6. by . 2010-07-31 23:07:25
i already downloaded it. am i supposed to do something or does it automatically do it by itself ( without opening the spyware doctor)?

7. by . 2010-07-28 12:07:12
How do I do it if Internet Exploer has already been taken over?

8. by i don't know. 2010-07-28 05:07:46
thanks for help

9. by . 2010-07-26 14:07:45
i knew it was fake as soon as i received it, i only use trusted and know established anti virus programs

10. by . 2010-07-22 09:07:48
i dont see either of the processes in the tasklist.

11. by Midnightghost. 2010-07-19 11:07:38
It could be named as smc20a_231.exe

you can use cmd

then enter command: tasklist to view running process because it blocks the task manager.

then I entered command: taskkill /im smc20a_231.exe /f to kill the process and removed it from msconfig > tab 'run' and the registry and the location.

12. by . 2010-07-13 19:07:11
quiero canselar el anti virus que conpre por motivos que se dano mi computador voy a llamar al banco para canselar el pedido

13. by . 2010-07-08 00:07:30
is this for reaL?

14. by . 2010-07-01 12:07:33
I want you crap removed from my computer NOW!!!! I did not ask for it. I am tired of it.

15. by . 2010-06-18 10:06:20
tnx man, you're the best

16. by . 2010-06-18 02:06:21
The owner of SECURITY MASTER AV is BASTARD!

17. by . 2010-06-07 19:06:39
Download another unknown software to remove first rouge one is not funny. Simply tell me steps in old fashion way. Thanks.

18. by . 2010-05-27 17:05:41
it is very helpful thanks for the site


Latest spyware news:
Similar parasites: