Welcome to remove-malware.net

Uninstall Antivirus Smart Protection fake anti-spyware scam

Malware Description:
Has Antivirus Smart Protection application been popping up on your computer since of late? Is it annoying you? If so, you have obviously run into one of the most noxious scareware programs rotated on the web presently. This is a post intended to help you find out what this pest does and how you can get rid of it. Antivirus Smart Protection enters one’s machine in a way that you are not likely to easily notice. It’s mostly a trojan-triggered process and even the firewall may overlook this attack. While operating on your PC, the app keeps attracting your attention to the supposed fact that there are lots of infections on the system. It says viruses, trojans and other nasty things are just about to compromise your privacy and start destroying your workstation. You must be wondering why this software is acting this way and what it is going to ask you to do eventually. The answer is it attempts to get you buying its full version, which is stated to be something that will help you combat the infections. But the truth is none of the malicious objects reported by this utility are actually there – the hackers had hard-coded this pseudo list into their solution to just scare their victims. Therefore you must not trust Antivirus Smart Protection, nor is it a good idea doing what it recommends. Here is the algorithm of your actions for eliminating this hazard: reboot your computer and enter Safe Mode with Networking via F8, go to this page and follow the tips below. You can do it manually or use the automatic remover to address this issue.

Malware Type: Rogue Anti-Spyware

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Antivirus Smart Protection Free Scanner and Remover: Download Now

Antivirus Smart Protection GUI Screenshot:

How to remove Antivirus Smart Protection manually:
Manual removal of this infection is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

• Delete Antivirus Smart Protection associated files and folders:
• %AllUsersProfile%\Application Data\5c678c\
• %AllUsersProfile%\Application Data\5c678c\sqlite3.dll
• %AllUsersProfile%\Application Data\5c678c\ASPSys\
• %AllUsersProfile%\Application Data\5c678c\BackUp\
• %AllUsersProfile%\Application Data\5c678c\Quarantine Items\
• %AllUsersProfile%\Application Data\5c678c\582.mof
• %AllUsersProfile%\Application Data\5c678c\AS9c5_8046.exe
• %AllUsersProfile%\Application Data\5c678c\ASP.ico
• %AllUsersProfile%\Application Data\5c678c\mozcrt19.dll
• %AllUsersProfile%\Application Data\ASLNP\
• %AllUsersProfile%\Application Data\ASLNP\ASUUDJRRJXP.cfg
• %AppData%\Antivirus Smart Protection\
• %AppData%\Antivirus Smart Protection\cookies.sqlite
• %AppData%\Microsoft\Internet Explorer\Quick Launch\Antivirus Smart Protection.lnk
• %UserProfile%\Desktop\Antivirus Smart Protection.lnk
• %Temp%\scandsk211d_8046.exe
• %UserProfile%\Start Menu\Antivirus Smart Protection.lnk
• %UserProfile%\Start Menu\Programs\Antivirus Smart Protection.lnk

The registry entries that need to be removed are as follows:

• HKEY_CURRENT_USER\Software\3
• HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
• HKEY_CLASSES_ROOT\MP3d5_8029.DocHostUIHandler
• HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=8040&q={searchTerms}”
• HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=8040&q={searchTerms}”
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PRS” = “http://127.0.0.1:27777/?inj=%ORIGINAL%”
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “88680791803″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “update/208040″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer “DisallowRun” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “0″ = “msseces.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “1″ = “MSASCui.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “10″ = “avgscanx.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “11″ = “avgcfgex.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “12″ = “avgemc.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “13″ = “avgchsvx.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “14″ = “avgcmgr.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “15″ = “avgwdsvc.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “2″ = “ekrn.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “3″ = “egui.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “4″ = “avgnt.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “5″ = “avcenter.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “6″ = “avscan.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “7″ = “avgfrw.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “8″ = “avgui.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun “9″ = “avgtray.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Malware Protection Center”
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpm.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aAvgApi.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adaware.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\agentsvr.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zatutor.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zonalm2601.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zonealarm.exe

Please be aware that manual removal of Antivirus Smart Protection is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal Antivirus Smart Protection, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Related Articles:

How to remove Smart Antivirus 2010 rogue anti-spyware
Remove Smart Protection 2012 malware and avoid it further on
Remove Home Safety Essentials fake virus removal tool
How to remove Antivirus Protection Trial rogue anti-spyware