Remove Security Master AV
Security Master AV is one of the most aggressive spyware programs around, which also makes it one of the most dangerous rogue antispyware programs. It is related to the Virus Doctor family. The main goal of the spyware program is to convince people that the only way to get rid of the malware is to buy the “full version” of the software. What you need to be aware of is that buying the software is not going to get rid of the malware or the pop ups because your computer is not currently infected with malware, it is the Security Master AV program that is causing the problems.
Automatic Security Master AV removal:
Security Master AV Remover
Warning! If the automatic remover is blocked by the spyware, then boot into Windows Safe Mode and try again. Learn how to boot into Safe Mode here.
Manual Security Master AV removal:
Kill processes: ANTIGEN.exe, PE.exe, SM8d7c.exe, std.exe
(Learn how to kill processes)
Unregister DLLs:
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\runddlkey.dll
(Learn how to unregister DLLs)
Delete registry keys:
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\SM345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Security Master AV"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
(Learn how to delete registry keys)
Delete files:
%CommonAppData%\8d7ca11\25.mof
%CommonAppData%\8d7ca11\SM8d7c.exe
%CommonAppData%\8d7ca11\SMAV.ico
%CommonAppData%\8d7ca11\SMAVSys\vd952342.bd
%AppData%\Microsoft\Internet Explorer\Quick Launch\Security Master AV.lnk
%AppData%\Security Master AV\cookies.sqlite
%Desktop%\Security Master AV.lnk
%UserProfile%\Recent\ANTIGEN.drv
%UserProfile%\Recent\ANTIGEN.exe
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.drv
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\ddv.sys
%UserProfile%\Recent\energy.tmp
%UserProfile%\Recent\FS.drv
%UserProfile%\Recent\gid.drv
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.exe
%UserProfile%\Recent\PE.sys
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\std.exe
%UserProfile%\Recent\tjd.drv
%UserProfile%\Recent\tjd.sys
%UserProfile%\Recent\runddlkey.dll
%StartMenu%\Security Master AV.lnk
%StartMenu%\Programs\Security Master AV.lnk
(Learn how to delete files)
Delete folders:
None
If this article has helped you, please take this time to share it with Digg using the Digg button (see Digg share button to the left) or retweet it using Twitter (see retweet button to the left). You may also want to follow us on Twitter to keep up-to-date with the latest spyware prevention tips and spyware threats. If you'd rather follow us from your Facebook account, please join our Facebook fan page.
Popular Articles