Smart Security is a fake (rogue) anti-virus program. It reports false system security threats to make you think that your computer is infected with worms, trojans and other malicious software. This fake program also displays bogus security warnings and pop-ups. If you are reading this article then your PC is probably infected with SmartSecurity scareware. Thankfully, there is a way to remove this virus from your computer for free using legitimate anti-malware applications. Just follow free Smart Security removal instructions below.
Smart Security is a clone of widely spread scareware called
Security Tool. As a typical fake program it enters a computer with the help of trojans that come from fake online scanners, misleading sites, malicious PDFs or bundled with other malware. Once installed, Smart Security simulates a system scan and reports numerous infections on your computer. Then it claims that you have to pay for a full version of the program if you want to remove the infections. So basically, it prompts you to buy needless software in order to remove infections which don't even exist. It goes without saying - Smart Security is 100% scam.
Furthermore, the rogue program displays fake and very annoying security warnings like every one or two minutes. That's another sign that Smart Security is not legitimate program, because reputable security software doesn't flood user with notifications, at least not so many in a minute.
"Smart Security Warning
Spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla Firefox, Outlook and other programs.
Click here to remove it immediately with SecurityTool."
However, the worst thing is that this virus blocks legitimate anti-virus and anti-spyware programs. It also hijacks Internet Explorer and blocks security sites. There may be other restrictions as well if the rogue program comes bundled or downloads other malicious software that blocks certain system tools.
If you find that your computer is infected with this virus then read the removal instructions below and remove Smart Security from your computer as soon as possible. Most importantly, don't purchase it! If it's already too late and you bought it then you should contact your credit card company immediately and dispute the charges. If you have any questions, don't hesitate and ask or leave a comment. Good luck!
Please note that there is a perfectly legitimate Internet security suite from ESET called ESET Smart Security Don't confuse these two programs. SmartSecurity (the fake one) application is not related to ESET.
Smart Security removal instructions (method #1):
NOTE: complete steps 1 and 2 if you can't use Internet or download/install malware removal tools listed in step 3.
1. Download
iexplore.exe (NOTE: iexplore.exe file is renamed
HijackThis tool from TrendMicro).
Launch the iexplore.exe and click "Do a system scan only" button.
If you can't open iexplore.exe file then download
explorer.scr and run it.
2. Search for such entries in the scan results:
O4 - HKLM\..\Run: [SmartSecurity] C:\Program Files\Smart Security\SmartSecurity.exe
O4 - HKCU\..\Run: [SmartSecurity] C:\Program Files\Smart Security\SmartSecurity.exe
Select all such entries and click once on the "Fix checked" button. Close HijackThis tool.
3. Download one of the following legitimate anti-malware applications and run a quick system scan. Don’t forget to update it first. All programs a free.
NOTE1: if you can't run any of the above programs you must rename the installer of selected program before saving it on your PC. For example: if you choose MalwareBytes then you have to rename mbam-setup.exe to iexplore.exe, explorer.exe or any random name like test123.exe before saving it.
NOTE2: if you still can't run the renamed file then you need to change file extension too not only the name.
1. Go to "My Computer".
2. Select "Tools" from menu and click "Folder Options".
3. Select "View" tab and uncheck the checkbox labeled "Hide file extensions for known file types". Click OK.
4. Rename mbam-setup.exe to either test123.com or test123.pif
5. Double-click to run renamed file.
Removing Smart Security in Safe Mode with Networking (method #2):
1. Reboot your computer is "
Safe Mode with Networking". As the computer is booting tap the "
F8 key" continuously which should bring up the "
Windows Advanced Options Menu" as shown below. Use your arrow keys to move to "Safe Mode with Networking" and press Enter key. Read more detailed instructions here:
http://www.computerhope.com/issues/chsafe.htm
NOTE:
Login as the same user you were previously logged in with in the normal Windows mode.
If you can't reboot your PC in Safe Mode with Networking, download
SafeBootKeyRepair and run it. If the rogue program blocks it then download and run this file
RenamedSBKRepair. Follow the prompts. Then reboot your PC in Safe Mode with Networking.
2.Download one of the following legitimate anti-malware applications and run a quick system scan. Don’t forget to update it first. All programs a free.
Smart Security files and registry values:
Files and folder:
- C:\Documents and Settings\All Users\Start Menu\Programs\Smart Security
- C:\Program Files\Smart Security
- C:\Program Files\Smart Security\SmartSecurity.exe
- C:\Program Files\Smart Security\unins000.dat
- C:\Program Files\Smart Security\unins000.exe
Registry keys and values:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart Security_is1
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SmartSecurity"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SmartSecurity"
Share this information with other people:
