Smart Anti-Malware Protection

Posted in: Malware

Call Toll Free in the US and Canada!

Title: Smart Anti-Malware Protection
Type: Rogue Antispyware

Remove Smart Anti-Malware Protection
. Removal instructions

 
Also known as: Smart AntiMalware Protection
Severity scale:Smart Anti-Malware Protection severity is 74  (74 / 100)

 

Smart Anti-Malware Protection is a rogue anti-spyware program that displays annoying and false security warnings to trick users into purchasing completely bogus security product. This rogue is from the same family as Antivirus Smart Protection and some other rogueware. Most of the time it’s distributed through the use of Trojan horses, drive-by downloads and fake onine scanners. Scammers however, may use various social engineering methods to persuade social network users to install Smart Anti-Malware Protection. When the program is installed it will be configured to start automatically when Windows starts. While installing , Smart Anti-Malware Protection will create numerous harmless files on the infected computer. These fake files are then detected as infections when the rogue program scans the infected computer. The program will not remove them, though, until you purchase it or valid activation key. This is a scam as the files it detects are the files it created on your computer in the first place. Scan results are completely false. Do not trust this program and remove it from your computer as soon as possible.

When Smart Anti-Malware Protection is running it will fake security alerts to further scare you into thinking you are infected. Some of the pop-up windows may look exactly like the legitimate Windows Security Center or system notifications. While Smart Anti-Malware Protection is running it will also display fake notifications from the task bar.

System Alert
Suspicious software which may be malicious has been detected on your PC. Click here to remove this threat immediately using Antivirus Smart Protection.

System Alert
Antivirus Smart Protection has detected potentially harmful software in your system. It is
strongly recommended that you register Antivirus Smart Protection to remove all found threats immediately.

System Alert
Potentially harmful programs have been detected in your system and need to be dealt with immediately. Click here to remove them using Antivirus Smart Protection.

When infected with Smart Anti-Malware Protection, Internet Explorer and other web browser will become hijacked so that it displays warning messages when you browse the web.  These fake messages are designed to scare you into thinking that he website you are about to visit is distributing malware and can potentially lead to malware infection. A typical scare tactic being used by the the rogue program and can be ignored. It goes without saying, Smart Anti-Malware Protection was designed to scare you into purchasing it by display fake scan results, hijacking web browsers and blocking legit security products. Do not purchase it and contact your credit card company if you’ve already did. Scan your computer with anti-malware application to remove Smart Anti-Malware Protection from the system. Use the removal instructions below. You may also use this activation key U2FD-S2LA-H4KA-UEPB to register the rogue program and make the removal procedure easier. 


  •     Reboot your computer in Safe Mode with Networking and download an automatic removal tool
  •     Rename executable file of the anti-malware from xxx.exe to xxx.com and run it

Automatic Smart Anti-Malware Protection removal:

remover for Smart Anti-Malware Protection

SpyHunter is recommended remover to uninstall Smart Anti-Malware Protection.
You should confirm using free trial that it detects current version of parasite.

Note:
Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention,
please read manul removal instructions below.

If you failed to remove Smart Anti-Malware Protection using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla
download | review

We are testing STOPzilla’s efficiency at removing Smart Anti-Malware Protection
(2012-02-02 05:02:04)

Malwarebytes Anti Malware
download | review

We are testing Malwarebytes Anti Malware’s efficiency at removing Smart Anti-Malware Protection
(2012-02-02 05:02:04)


Spyware Doctor
download | review | tutorial

We are testing Spyware Doctor’s efficiency at removing Smart Anti-Malware Protection
(2012-02-02 05:02:04)

XoftSpySE Anti Spyware
download | review

Smart Anti-Malware Protection manual removal:

Kill processes:
[random].exe AS9c5_8046.exe scandsk211d_8046.exe ASa76.exe eb.exe runddlkey.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\Software\Classes\clsid\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
Default = Implements DocHostUIHandler
LocalServer32 = %AllUsersProfile%\Application Data\5c678c\AS9c5_8046.exe
ProgID = AS9c5_8046.DocHostUIHandler
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdwarePrj.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\agent.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\Anti-Virus Professional.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntispywarXP2009.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPlus\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPlus.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPro_2010.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusXP\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusXP.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\antivirusxppro2009.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntiVirus_Pro.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\av360.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\brastk.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\Cl.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\csc.exe\
Debugger = svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\dop.exe\
Debugger = svchost.exe

HELP:
how to remove registry entries

Unregister DLLs:
mozcrt19.dll

HELP:
how to unregister malicious DLLs

Delete files:
%AllUsersProfile%\Application Data\5c678c\ %AllUsersProfile%\Application Data\5c678c\sqlite3.dll %AllUsersProfile%\Application Data\5c678c\ASPSys\ %AllUsersProfile%\Application Data\5c678c\BackUp\ %AllUsersProfile%\Application Data\5c678c\Quarantine Items\ %AllUsersProfile%\Application Data\5c678c\582.mof %AllUsersProfile%\Application Data\5c678c\AS9c5_8046.exe %AllUsersProfile%\Application Data\5c678c\ASP.ico %AllUsersProfile%\Application Data\5c678c\mozcrt19.dll %AllUsersProfile%\Application Data\ASLNP\ %AllUsersProfile%\Application Data\ASLNP\ASUUDJRRJXP.cfg %AppData%\Smart Anti-Malware Protection\ %AppData%\Smart Anti-Malware Protection\cookies.sqlite %AppData%\Microsoft\Internet Explorer\Quick Launch\Smart Anti-Malware Protection.lnk %UserProfile%\Desktop\Smart Anti-Malware Protection.lnk %Temp%\scandsk211d_8046.exe %UserProfile%\Start Menu\Smart Anti-Malware Protection.lnk %UserProfile%\Start Menu\Programs\Smart Anti-Malware Protection.lnk

HELP:
how to remove harmful files

Information added: 2012-02-02 05:02:04
Information updated: 2012-02-02 05:06:02
Tags: , ,