Thursday, February 2, 2012

Remove Smart Anti-Malware Protection incredibly annoying and totally misleading program

Smart Anti-Malware Protection is another web-spoof detected on the beginning of February 2012. The program shows how much deceiving names could be as it is a totally fake program that has nothing to do with antivirus technologies wearing skins of security solution for Windows. It is as insecure as a high risk virus, yet incredibly annoying and totally misleading.
Removal of Smart Anti-Malware Protection is a routine activity for properly updated security solutions as the counterfeit is a clone of a number of applications. Its family is referred to by malware experts as malware strain, where VirusDoctor is one of the most notorious parasites released at the time of family origin.
Lately observed programs of the same genus (Malware Protection Center, Antivirus Smart Protection) are visually identical to the malware in question.
Click here to start free scan and get rid of Smart Anti-Malware Protection virus that performs a range of deceptive and destructive tasks.


Smart Anti-Malware Protection screenshots:


How to remove Smart Anti-Malware Protection manually?
Delete files:
 %AllUsersProfile%\Application Data\[SET OF RANDOM CHARACTERS]\
%AppData%\Smart Anti-Malware Protection\
%AppData%\Microsoft\Internet Explorer\Quick Launch\Smart Anti-Malware Protection.lnk
%UserProfile%\Desktop\Smart Anti-Malware Protection
%UserProfile%\Start Menu\Smart Anti-Malware Protection.lnk
%UserProfile%\Start Menu\Programs\Smart Anti-Malware Protection.lnk

Delete the following registry entries (remember to backup your registry):
HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Run\Internet Security Guard = "%AllUsersProfile%\Application Data\78b634\HS239.exe" /s /d
HKEY_CURRENT_USER\software\3
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\[RANDOM].exe\Debugger = svchost.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun = 01000000
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\[1...15]
 Rename the remover to "explorer.exe" or try to install from Safe Mode if virus blocks download\installation


No comments: