Severity scale  
  (74/100)

Smart Anti-Malware Protection. How to Remove? (Uninstall Guide)

removal by - -   Also known as Smart AntiMalware Protection | Type: Rogue Antispyware
12

Smart Anti-Malware Protection is a rogue anti-spyware program that displays annoying and false security warnings to trick users into purchasing completely bogus security product. This rogue is from the same family as Antivirus Smart Protection and some other rogueware. Most of the time it's distributed through the use of Trojan horses, drive-by downloads and fake onine scanners. Scammers however, may use various social engineering methods to persuade social network users to install Smart Anti-Malware Protection. When the program is installed it will be configured to start automatically when Windows starts. While installing , Smart Anti-Malware Protection will create numerous harmless files on the infected computer. These fake files are then detected as infections when the rogue program scans the infected computer. The program will not remove them, though, until you purchase it or valid activation key. This is a scam as the files it detects are the files it created on your computer in the first place. Scan results are completely false. Do not trust this program and remove it from your computer as soon as possible.

When Smart Anti-Malware Protection is running it will fake security alerts to further scare you into thinking you are infected. Some of the pop-up windows may look exactly like the legitimate Windows Security Center or system notifications. While Smart Anti-Malware Protection is running it will also display fake notifications from the task bar.

System Alert
Suspicious software which may be malicious has been detected on your PC. Click here to remove this threat immediately using Antivirus Smart Protection.

System Alert
Antivirus Smart Protection has detected potentially harmful software in your system. It is
strongly recommended that you register Antivirus Smart Protection to remove all found threats immediately.
System Alert
Potentially harmful programs have been detected in your system and need to be dealt with immediately. Click here to remove them using Antivirus Smart Protection.

When infected with Smart Anti-Malware Protection, Internet Explorer and other web browser will become hijacked so that it displays warning messages when you browse the web. These fake messages are designed to scare you into thinking that he website you are about to visit is distributing malware and can potentially lead to malware infection. A typical scare tactic being used by the the rogue program and can be ignored. It goes without saying, Smart Anti-Malware Protection was designed to scare you into purchasing it by display fake scan results, hijacking web browsers and blocking legit security products. Do not purchase it and contact your credit card company if you've already did. Scan your computer with anti-malware application to remove Smart Anti-Malware Protection from the system. Use the removal instructions below. You may also use this activation key U2FD-S2LA-H4KA-UEPB to register the rogue program and make the removal procedure easier.

  • Reboot your computer in Safe Mode with Networking and download an automatic removal tool
  • Rename executable file of the anti-malware from xxx.exe to xxx.com and run it

Smart Anti-Malware Protection video guide



It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Smart Anti-Malware Protection. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall Smart Anti-Malware Protection. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
Plumbytes
We are testing Plumbytes's efficiency (2012-02-03 09:03)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2012-02-03 09:03)
Hitman Pro
Webroot SecureAnywhere AntiVirus

Smart Anti-Malware Protection manual removal

Kill processes:
[random].exe
AS9c5_8046.exe
scandsk211d_8046.exe
ASa76.exe
eb.exe
runddlkey.exe
Delete registry values:
HKEY_LOCAL_MACHINE\Software\Classes\clsid\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
Default = Implements DocHostUIHandler
LocalServer32 = %AllUsersProfile%\Application Data\5c678c\AS9c5_8046.exe
ProgID = AS9c5_8046.DocHostUIHandler
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdwarePrj.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\agent.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\Anti-Virus Professional.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntispywarXP2009.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPlus\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPlus.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPro_2010.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusXP\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusXP.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\antivirusxppro2009.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntiVirus_Pro.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\av360.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\brastk.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\Cl.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\csc.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\dop.exe\
Debugger = svchost.exe
Unregister DLLs:
mozcrt19.dll

Delete files:
%AllUsersProfile%\Application Data\5c678c\
%AllUsersProfile%\Application Data\5c678c\sqlite3.dll
%AllUsersProfile%\Application Data\5c678c\ASPSys\
%AllUsersProfile%\Application Data\5c678c\BackUp\
%AllUsersProfile%\Application Data\5c678c\Quarantine Items\
%AllUsersProfile%\Application Data\5c678c\582.mof
%AllUsersProfile%\Application Data\5c678c\AS9c5_8046.exe
%AllUsersProfile%\Application Data\5c678c\ASP.ico
%AllUsersProfile%\Application Data\5c678c\mozcrt19.dll
%AllUsersProfile%\Application Data\ASLNP\
%AllUsersProfile%\Application Data\ASLNP\ASUUDJRRJXP.cfg
%AppData%\Smart Anti-Malware Protection\
%AppData%\Smart Anti-Malware Protection\cookies.sqlite
%AppData%\Microsoft\Internet Explorer\Quick Launch\Smart Anti-Malware Protection.lnk
%UserProfile%\Desktop\Smart Anti-Malware Protection.lnk
%Temp%\scandsk211d_8046.exe
%UserProfile%\Start Menu\Smart Anti-Malware Protection.lnk
%UserProfile%\Start Menu\Programs\Smart Anti-Malware Protection.lnk

Information updated:

Comments on Smart Anti-Malware Protection

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)