Windows Smart Partner is a rogue anti-spyware program from the same family as Windows Smart Warden and Windows Functionality Checker. It's distributed mostly through the use of fake online virus scanners and hacked websites. Once installed, this rogue program will run a fake system scan every time Windows starts and claim that your computer in infected with trojans, adware, spyware and other persky viruses. Once in a while, Windows Smart Partner will prompt you to buy the full version of the program to remove found malware infections and to ensure system protection against other threats that may indeed appear on your computer if you won't remove Windows Smart Partner scam. Don't purchase it and fillow and use the removal instructions below to remove Windows Smart Partner either manually or with an automatic removal tool.
While running, Windows Smart Partner will display a bunch of fake security alerts and pop-ups stating that your computer is infected or under attack from a remote server controlled by hackers.
Firewall has blocked a program from accessing the Internet.
Windows Media Player Resources
C:\Windows\system32\dllcache\wmploc.dll is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
The scammers want to make you think that your computer is infected with and to further scare you into buying their useless and malicious program. What is more, Windows Smart Partner will block some programs on your computer saying that they are either infected or may cause serious damage to the system. If you run task manager for example, you will be get the Windows Smart Partner process manager instead. Last, but not least, Windows Smart Partner will hijack Internet Explorer and redirect you to various misleading websites that may harm your computer or install malicious software. If you find that your computer in infected with this rogue program then use our removal guide below. We strongly recommend you to remove this malware from your PC using an automatic removal tool given below.
The latest parasite names used by FakeVimes:
Windows Smart Partner manual removal:
Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegedit" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegistryTools" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "ID" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "net" = "2012-2-17_2"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "UID" = "rudbxijemb"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avp32.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avpcc.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsashDisp.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsdivx.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmostat.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsplatin.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstapinstall.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionszapsetup3001.exe
%appdata%Inspector-[3 random characters].exe
%desktopdir%Windows Smart Partner.lnk
%StartMenu%ProgramsWindows Smart Partner.lnk