Remove Antivirus Smart Protection
. Removal instructions
Antivirus Smart Protection is another member of malicious Virus Doctor family which is also responsible for Malware Protection Center and other threats. This tricky cyber threat is created by scammers who let such rogue anti-spywares into the wild in order to gain some money. Also classified as rogue anti-spyware, Antivirus Smart Protection reports invented viruses and then starts asking from its victim to purchase the licensed version in order to remove them. However, it must be understood that Antivirus Smart Protection is useless in detecting and removing viruses because it has an empty virus database. As soon as you find it, remember that you must remove Antivirus Smart Protection from your computer without any delay, so we recommend you running updated Spyware Doctor, Spyhunter or other reputable anti-spyware.
To begin with, Antivirus Smart Protection is closely related to trojans when it comes an infiltration moment. They get inside the system through security vulnerabilities found and additionally make some unwanted modifications to computer’s registry. Because of these changes, malware immediately gets ability to start once the PC is rebooted and displays its annoying system scanners and alerts without any pause. Most of these notifications from Antivirus Smart Protection report:
Warning! Virus detected
Threat detected: Trojan-PSW.Win32.Antigen.a
Security Risk: high
Infected File: C:\\Documents and Settings\Administrator\Recent\
Description: This Trojan named ANTIGEN.EXE scans system files for your Internet passwords to steal and misuse them. It also scans your data for more private information: phone…
Recommended: Please click ‘Remove all’ button to erase all infected files and protect your PC.
System Alert
Potentially harmful programs have been detected in your system and need to be dealt with immediately. Click here to remove them using Antivirus Smart Protection.
Warning! Spambot detected!
Attention! A spambot sending viruses to your e-mail contacts has been detected on your PC.
Warning! Identity theft attempt detected
Recommended: Please click “Remove All” button to erase all infected files and protect your PC.
Address space conflict
Warning! Access conflict detected
An unidentified program is trying to access system process address space.
All the popup alerts and scanners from Antivirus Smart Protection continuously report that program has found some potential risks on your machine. That will be also ‘proved’ by faked system scanners running every time you start using your PC. However, in reality Antivirus Smart Protection just pretends to check the machine for the presence of harmful items. In fact, all these messages should never be trusted because they seek only to scare you about your machine. Trying to make you think that only Antivirus Smrt Protection full version will get them all removed for you, this scam expects to get some easy money from you. However, before you fall for it, think if you have ever installed this program on your computer. In addition, try running your normal antispyware programs to check if you are really infected with those threats. It can be almost guaranteed, that your anti-spyware won’t detect them.
We highly recommend you to remove Antivirus Smart Protectiont as soon as you start receiving its alerts. Note that it blocks security programs found on the PC, so try these tips in order to launch your anti-spyware program:
- Use the latest, 2012 year version, of Spyware Doctor.
- Rename executable file of the anti-malware from xxx.exe to xxx.com.
- Reboot the PC to Safe Mode with Networking and try launching you anti-spyware then.
Automatic Antivirus Smart Protection removal:
(2012-01-25 03:35:31)
(2012-01-25 03:35:31)
(2012-01-25 03:35:31)
Antivirus Smart Protection manual removal:
Kill processes:
[random].exe AS9c5_8046.exe scandsk211d_8046.exe ASa76.exe eb.exe runddlkey.exe
how to kill malicious processes
Delete registry values:
HKEY_LOCAL_MACHINE\Software\Classes\clsid\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
Default = Implements DocHostUIHandler
LocalServer32 = %AllUsersProfile%\Application Data\5c678c\AS9c5_8046.exe
ProgID = AS9c5_8046.DocHostUIHandler
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdwarePrj.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\agent.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\Anti-Virus Professional.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntispywarXP2009.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPlus\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPlus.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPro_2010.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusXP\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusXP.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\antivirusxppro2009.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntiVirus_Pro.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\av360.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\brastk.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\Cl.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\csc.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\dop.exe\
Debugger = svchost.exe
how to remove registry entries
Unregister DLLs:
mozcrt19.dll
how to unregister malicious DLLs
Delete files:
%AllUsersProfile%\Application Data\5c678c\ %AllUsersProfile%\Application Data\5c678c\sqlite3.dll %AllUsersProfile%\Application Data\5c678c\ASPSys\ %AllUsersProfile%\Application Data\5c678c\BackUp\ %AllUsersProfile%\Application Data\5c678c\Quarantine Items\ %AllUsersProfile%\Application Data\5c678c\582.mof %AllUsersProfile%\Application Data\5c678c\AS9c5_8046.exe %AllUsersProfile%\Application Data\5c678c\ASP.ico %AllUsersProfile%\Application Data\5c678c\mozcrt19.dll %AllUsersProfile%\Application Data\ASLNP\ %AllUsersProfile%\Application Data\ASLNP\ASUUDJRRJXP.cfg %AppData%\Antivirus Smart Protection\ %AppData%\Antivirus Smart Protection\cookies.sqlite %AppData%\Microsoft\Internet Explorer\Quick Launch\Antivirus Smart Protection.lnk %UserProfile%\Desktop\Antivirus Smart Protection.lnk %Temp%\scandsk211d_8046.exe %UserProfile%\Start Menu\Antivirus Smart Protection.lnk %UserProfile%\Start Menu\Programs\Antivirus Smart Protection.lnk
how to remove harmful files
Information updated: 2012-01-26 02:20:43