Smart Anti-Malware Protection is a rogue anti-spyware program that displays annoying and false security warnings to trick users into purchasing completely bogus security product. This rogue is from the same family as Antivirus Smart Protection and some other rogueware. Most of the time it's distributed through the use of Trojan horses, drive-by downloads and fake onine scanners. Scammers however, may use various social engineering methods to persuade social network users to install Smart Anti-Malware Protection. When the program is installed it will be configured to start automatically when Windows starts. While installing , Smart Anti-Malware Protection will create numerous harmless files on the infected computer. These fake files are then detected as infections when the rogue program scans the infected computer. The program will not remove them, though, until you purchase it or valid activation key. This is a scam as the files it detects are the files it created on your computer in the first place. Scan results are completely false. Do not trust this program and remove it from your computer as soon as possible.
When Smart Anti-Malware Protection is running it will fake security alerts to further scare you into thinking you are infected. Some of the pop-up windows may look exactly like the legitimate Windows Security Center or system notifications. While Smart Anti-Malware Protection is running it will also display fake notifications from the task bar.
When infected with Smart Anti-Malware Protection, Internet Explorer and other web browser will become hijacked so that it displays warning messages when you browse the web. These fake messages are designed to scare you into thinking that he website you are about to visit is distributing malware and can potentially lead to malware infection. A typical scare tactic being used by the the rogue program and can be ignored. It goes without saying, Smart Anti-Malware Protection was designed to scare you into purchasing it by display fake scan results, hijacking web browsers and blocking legit security products. Do not purchase it and contact your credit card company if you've already did. Scan your computer with anti-malware application to remove Smart Anti-Malware Protection from the system. Use the removal instructions below. You may also use this activation key U2FD-S2LA-H4KA-UEPB to register the rogue program and make the removal procedure easier.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove Smart Anti-Malware Protection you agree to our
privacy policy and
agreement of use.
Smart Anti-Malware Protection manual removal:
Kill processes:
[random].exe
AS9c5_8046.exe
scandsk211d_8046.exe
ASa76.exe
eb.exe
runddlkey.exe
Delete registry values:HKEY_LOCAL_MACHINE\Software\Classes\clsid\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
Default = Implements DocHostUIHandler
LocalServer32 = %AllUsersProfile%\Application Data\5c678c\AS9c5_8046.exe
ProgID = AS9c5_8046.DocHostUIHandler
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdwarePrj.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\agent.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\Anti-Virus Professional.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntispywarXP2009.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPlus\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPlus.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPro_2010.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusXP\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusXP.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\antivirusxppro2009.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntiVirus_Pro.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\av360.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\brastk.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\Cl.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\csc.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\dop.exe\
Debugger = svchost.exe
Unregister DLLs:mozcrt19.dll
Delete files:%AllUsersProfile%\Application Data\5c678c\
%AllUsersProfile%\Application Data\5c678c\sqlite3.dll
%AllUsersProfile%\Application Data\5c678c\ASPSys\
%AllUsersProfile%\Application Data\5c678c\BackUp\
%AllUsersProfile%\Application Data\5c678c\Quarantine Items\
%AllUsersProfile%\Application Data\5c678c\582.mof
%AllUsersProfile%\Application Data\5c678c\AS9c5_8046.exe
%AllUsersProfile%\Application Data\5c678c\ASP.ico
%AllUsersProfile%\Application Data\5c678c\mozcrt19.dll
%AllUsersProfile%\Application Data\ASLNP\
%AllUsersProfile%\Application Data\ASLNP\ASUUDJRRJXP.cfg
%AppData%\Smart Anti-Malware Protection\
%AppData%\Smart Anti-Malware Protection\cookies.sqlite
%AppData%\Microsoft\Internet Explorer\Quick Launch\Smart Anti-Malware Protection.lnk
%UserProfile%\Desktop\Smart Anti-Malware Protection.lnk
%Temp%\scandsk211d_8046.exe
%UserProfile%\Start Menu\Smart Anti-Malware Protection.lnk
%UserProfile%\Start Menu\Programs\Smart Anti-Malware Protection.lnk
|
Follow us 
|
Like us 
FORUM:
HELP:
Post Comment: