Severity scale:  
  (74/100)

Smart Anti-Malware Protection. How to remove? (Uninstall guide)

removal by Lucia Danes - -   Also known as Smart AntiMalware Protection | Type: Rogue Antispyware
12

Smart Anti-Malware Protection is a rogue anti-spyware program that displays annoying and false security warnings to trick users into purchasing completely bogus security product. This rogue is from the same family as Antivirus Smart Protection and some other rogueware. Most of the time it's distributed through the use of Trojan horses, drive-by downloads and fake onine scanners. Scammers however, may use various social engineering methods to persuade social network users to install Smart Anti-Malware Protection. When the program is installed it will be configured to start automatically when Windows starts. While installing , Smart Anti-Malware Protection will create numerous harmless files on the infected computer. These fake files are then detected as infections when the rogue program scans the infected computer. The program will not remove them, though, until you purchase it or valid activation key. This is a scam as the files it detects are the files it created on your computer in the first place. Scan results are completely false. Do not trust this program and remove it from your computer as soon as possible.

When Smart Anti-Malware Protection is running it will fake security alerts to further scare you into thinking you are infected. Some of the pop-up windows may look exactly like the legitimate Windows Security Center or system notifications. While Smart Anti-Malware Protection is running it will also display fake notifications from the task bar.

System Alert
Suspicious software which may be malicious has been detected on your PC. Click here to remove this threat immediately using Antivirus Smart Protection.

System Alert
Antivirus Smart Protection has detected potentially harmful software in your system. It is
strongly recommended that you register Antivirus Smart Protection to remove all found threats immediately.

System Alert
Potentially harmful programs have been detected in your system and need to be dealt with immediately. Click here to remove them using Antivirus Smart Protection.

When infected with Smart Anti-Malware Protection, Internet Explorer and other web browser will become hijacked so that it displays warning messages when you browse the web. These fake messages are designed to scare you into thinking that he website you are about to visit is distributing malware and can potentially lead to malware infection. A typical scare tactic being used by the the rogue program and can be ignored. It goes without saying, Smart Anti-Malware Protection was designed to scare you into purchasing it by display fake scan results, hijacking web browsers and blocking legit security products. Do not purchase it and contact your credit card company if you've already did. Scan your computer with anti-malware application to remove Smart Anti-Malware Protection from the system. Use the removal instructions below. You may also use this activation key U2FD-S2LA-H4KA-UEPB to register the rogue program and make the removal procedure easier.

  • Reboot your computer in Safe Mode with Networking and download an automatic removal tool
  • Rename executable file of the anti-malware from xxx.exe to xxx.com and run it
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Smart Anti-Malware Protection you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Smart Anti-Malware Protection. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

Smart Anti-Malware Protection manual removal:

Kill processes:
[random].exe

AS9c5_8046.exe

scandsk211d_8046.exe

ASa76.exe

eb.exe

runddlkey.exe

Delete registry values:
HKEY_LOCAL_MACHINESoftwareClassesclsid{3F2BBC05-40DF-11D2-9455-00104BC936FF}

Default = Implements DocHostUIHandler

LocalServer32 = %AllUsersProfile%Application Data5c678cAS9c5_8046.exe

ProgID = AS9c5_8046.DocHostUIHandler

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Options

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAdwarePrj.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsagent.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAlphaAV

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAlphaAV.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAnti-Virus Professional.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntispywarXP2009.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusPlus

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusPlus.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusPro_2010.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusXP

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntivirusXP.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsantivirusxppro2009.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAntiVirus_Pro.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsav360.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsAVCare.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsbrastk.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution OptionsCl.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionscsc.exe

Debugger = svchost.exe

HKEY_LOCAL_MACHINEsoftwaremicrosoftWindows NTCurrentVersionImage File Execution Optionsdop.exe

Debugger = svchost.exe

Unregister DLLs:
mozcrt19.dll

Delete files:
%AllUsersProfile%Application Data5c678c

%AllUsersProfile%Application Data5c678csqlite3.dll

%AllUsersProfile%Application Data5c678cASPSys

%AllUsersProfile%Application Data5c678cBackUp

%AllUsersProfile%Application Data5c678cQuarantine Items

%AllUsersProfile%Application Data5c678c582.mof

%AllUsersProfile%Application Data5c678cAS9c5_8046.exe

%AllUsersProfile%Application Data5c678cASP.ico

%AllUsersProfile%Application Data5c678cmozcrt19.dll

%AllUsersProfile%Application DataASLNP

%AllUsersProfile%Application DataASLNPASUUDJRRJXP.cfg

%AppData%Smart Anti-Malware Protection

%AppData%Smart Anti-Malware Protectioncookies.sqlite

%AppData%MicrosoftInternet ExplorerQuick LaunchSmart Anti-Malware Protection.lnk

%UserProfile%DesktopSmart Anti-Malware Protection.lnk

%Temp%scandsk211d_8046.exe

%UserProfile%Start MenuSmart Anti-Malware Protection.lnk

%UserProfile%Start MenuProgramsSmart Anti-Malware Protection.lnk

About the author

Lucia Danes
Lucia Danes - Virus researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Lucia Danes
About the company Esolutions