Severity scale:  
  (80/100)

Antivirus Smart Protection. How to remove? (Uninstall guide)

removal by Ugnius Kiguolis - -   Also known as AntivirusSmartProtection | Type: Rogue Antispyware
12

Antivirus Smart Protection is another member of malicious Virus Doctor family which is also responsible for Malware Protection Center and other threats. This tricky cyber threat is created by scammers who let such rogue anti-spywares into the wild in order to gain some money. Also classified as rogue anti-spyware, Antivirus Smart Protection reports invented viruses and then starts asking from its victim to purchase the licensed version in order to remove them. However, it must be understood that Antivirus Smart Protection is useless in detecting and removing viruses because it has an empty virus database. As soon as you find it, remember that you must remove Antivirus Smart Protection from your computer without any delay, so we recommend you running updated STOPzilla, Spyhunter or other reputable anti-spyware.

To begin with, Antivirus Smart Protection is closely related to trojans when it comes an infiltration moment. They get inside the system through security vulnerabilities found and additionally make some unwanted modifications to computer's registry. Because of these changes, malware immediately gets ability to start once the PC is rebooted and displays its annoying system scanners and alerts without any pause. Most of these notifications from Antivirus Smart Protection report:

Warning! Virus detected

Threat detected: Trojan-PSW.Win32.Antigen.a

Security Risk: high

Infected File: C:\\Documents and Settings\Administrator\Recent\

Description: This Trojan named ANTIGEN.EXE scans system files for your Internet passwords to steal and misuse them. It also scans your data for more private information: phone…

Recommended: Please click 'Remove all' button to erase all infected files and protect your PC.

System Alert
Potentially harmful programs have been detected in your system and need to be dealt with immediately. Click here to remove them using Antivirus Smart Protection.

Warning! Spambot detected!
Attention! A spambot sending viruses to your e-mail contacts has been detected on your PC.

Warning! Identity theft attempt detected
Recommended: Please click “Remove All” button to erase all infected files and protect your PC.

Address space conflict
Warning! Access conflict detected
An unidentified program is trying to access system process address space.

All the popup alerts and scanners from Antivirus Smart Protection continuously report that program has found some potential risks on your machine. That will be also 'proved' by faked system scanners running every time you start using your PC. However, in reality Antivirus Smart Protection just pretends to check the machine for the presence of harmful items. In fact, all these messages should never be trusted because they seek only to scare you about your machine. Trying to make you think that only Antivirus Smrt Protection full version will get them all removed for you, this scam expects to get some easy money from you. However, before you fall for it, think if you have ever installed this program on your computer. In addition, try running your normal antispyware programs to check if you are really infected with those threats. It can be almost guaranteed, that your anti-spyware won't detect them.

We highly recommend you to remove Antivirus Smart Protectiont as soon as you start receiving its alerts. Note that it blocks security programs found on the PC, so try these tips in order to launch your anti-spyware program:

  • Use the latest, 2012 year version, of STOPzilla.
  • Rename executable file of the anti-malware from xxx.exe to xxx.com.
  • Reboot the PC to Safe Mode with Networking and try launching you anti-spyware then.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Antivirus Smart Protection you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Antivirus Smart Protection. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

Antivirus Smart Protection manual removal:

Kill processes:
[random].exe

AS9c5_8046.exe

scandsk211d_8046.exe

ASa76.exe

eb.exe

runddlkey.exe

Delete registry values:
HKEY_LOCAL_MACHINESoftwareClassesclsid{3F2BBC05-40DF-11D2-9455-00104BC936FF}

Default = Implements DocHostUIHandler

LocalServer32 = %AllUsersProfile%Application Data5c678cAS9c5_8046.exe

ProgID = AS9c5_8046.DocHostUIHandler

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Options

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAdwarePrj.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsagent.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAlphaAV

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAlphaAV.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAnti-Virus Professional.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntispywarXP2009.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusPlus

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusPlus.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusPro_2010.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusXP

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusXP.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsantivirusxppro2009.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntiVirus_Pro.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsav360.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAVCare.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsbrastk.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsCl.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionscsc.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsdop.exe

Debugger = svchost.exe

Unregister DLLs:
mozcrt19.dll

Delete files:
%AllUsersProfile%Application Data5c678c

%AllUsersProfile%Application Data5c678csqlite3.dll

%AllUsersProfile%Application Data5c678cASPSys

%AllUsersProfile%Application Data5c678cBackUp

%AllUsersProfile%Application Data5c678cQuarantine Items

%AllUsersProfile%Application Data5c678c582.mof

%AllUsersProfile%Application Data5c678cAS9c5_8046.exe

%AllUsersProfile%Application Data5c678cASP.ico

%AllUsersProfile%Application Data5c678cmozcrt19.dll

%AllUsersProfile%Application DataASLNP

%AllUsersProfile%Application DataASLNPASUUDJRRJXP.cfg

%AppData%Antivirus Smart Protection

%AppData%Antivirus Smart Protectioncookies.sqlite

%AppData%MicrosoftInternet ExplorerQuick LaunchAntivirus Smart Protection.lnk

%UserProfile%DesktopAntivirus Smart Protection.lnk

%Temp%scandsk211d_8046.exe

%UserProfile%Start MenuAntivirus Smart Protection.lnk

%UserProfile%Start MenuProgramsAntivirus Smart Protection.lnk

About the author

Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Ugnius Kiguolis
About the company Esolutions


  • Jenita

    Antivirus Smart Protection may pretend to be a legitimate and independent program, but Antivirus Smart Protection is a mere variant of older types of rogue anti-malware scanners with a new name slapped on top for a fresh marketing effort.

  • arun

    spy hunter is asking for registration….but its not deleting the antivirus smart protection……please guide me

  • binary plan

    Thank You

    The given information is very effective….!!!

    binary plan