Smart Virus Eliminator is a rogue security application that uses fake scan results and untrusted security alerts as deceptive means to tell computer users about the status of the system. Smart Virus Eliminator was created in the same manner and the same developer as Windows Protection Suite and Windows Security Suite.
It is believed that Smart Virus Eliminator will not eliminate viruses instead, more and more malware will be integrated into the system until this program is not removed. It is accompanied with a Trojan that may pull down additional malicious files from its own server.
What Smart Virus Eliminator Does?
A virus scan will run after the installation process and will provide fake results.
It will modify Windows Registry and add the following entries:
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PRS”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\UserAgent\Post Platform “969904308603”
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Smart Virus Eliminator”
- HKEY_CLASSES_ROOT\asp2009.DocHostUIHandler
- HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
- HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “hxxp://search-gala.com/?&uid=8000&q={searchTerms}”
The threat will drop the following malicious files:
- %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Smart Virus Eliminator.lnk
- %UserProfile%\Application Data\Smart Virus Eliminator
- %UserProfile%\Application Data\Smart Virus Eliminator\cookies.sqlite
- %UserProfile%\Application Data\Smart Virus Eliminator\Instructions.ini
- %UserProfile%\Desktop\Smart Virus Eliminator.lnk
- %UserProfile%\Recent\ANTIGEN.drv
- %UserProfile%\Recent\CLSV.exe
- %UserProfile%\Recent\DBOLE.drv
- %UserProfile%\Recent\dudl.sys
- %UserProfile%\Recent\energy.dll
- %UserProfile%\Recent\grid.dll
- %UserProfile%\Recent\grid.sys
- %UserProfile%\Recent\kernel32.dll
- %UserProfile%\Recent\tempdoc.dll
- %UserProfile%\Recent\PE.dll
- %UserProfile%\Recent\PE.tmp
- %UserProfile%\Recent\runddl.dll
- %UserProfile%\Recent\SM.dll
- %UserProfile%\Recent\snl2w.exe
- %UserProfile%\Recent\std.exe
- %Program Files%\Smart Virus Eliminator\Smart Virus Eliminator.exe
- %Program Files%\Smart Virus Eliminator\Smart Virus Eliminator.url
- %Program Files%\Mozilla Firefox\searchplugins\search.xml
- %UserProfile%\Start Menu\Programs\Smart Virus Eliminator
- %UserProfile%\Start Menu\Smart Virus Eliminator.lnk
- %UserProfile%\Start Menu\Programs\Smart Virus Eliminator\Smart Virus Eliminator.lnk
- %UserProfile%\Start Menu\Programs\Smart Virus Eliminator\Smart Virus Eliminator Website.lnk
- %UserProfile%\Desktop\Smart Virus Eliminator.exe
- %UserProfile%\Start Menu\Smart Virus Eliminator 2009.lnk
- %UserProfile%\Start Menu\Programs\Smart Virus Eliminator 2009.lnk
- %UserProfile%\Application Data\Smart Virus Eliminator 2009
- %UserProfile%\Application Data\Smart Virus Eliminator 2009\Instructions.ini
- %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Smart Virus Eliminator 2009.lnk
- %UserProfile%\Desktop\Smart Virus Eliminator 2009.lnk
- %Documents and Settings%\All Users\Application Data\345d567
- %Documents and Settings%\All Users\Application Data\345d567\WINSSSys
- %Documents and Settings%\All Users\Application Data\WINSSSys
- %Documents and Settings%\All Users\Application Data\345d567\26.mof
- %Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
- %Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
- %Documents and Settings%\All Users\Application Data\345d567\WI345d.exe
- %Documents and Settings%\All Users\Application Data\345d567\WINSS.ico
- %Documents and Settings%\All Users\Application Data\345d567\working.log
- %Documents and Settings%\All Users\Application Data\345d567\WINSSSys\vd952342.bd
- %Documents and Settings%\All Users\Application Data\WINSSSys\winss.cfg
- %UserProfile%\Start Menu\Smart Virus Eliminator.lnk
- %UserProfile%\Start Menu\Programs\Smart Virus Eliminator.lnk
How to Remove ”Smart Virus Eliminator” Manually
1. Restart your computer in SafeMode
– After Power-On the computer, just before Windows start, press F8
– From the selections, Select SafeMode
2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
– Click Start > Run
– Type in the field, regedit
– Navigate and look for the registry entries mentioned above and delete if necessary
3. Delete malicious files that the threat added:
– Base on the given location above, browse and delete the file
– If no location is given, click Start>Search> and search for the file.
– If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.
4. Scan computer with Antivirus Program
– Update antivirus program
– Scan computer and delete all detected threats.
How to Easily Remove “Smart Virus Eliminator”
1. Print this procedure as we need to close all programs running later.
2. Download AntiMalware Application here and save it to your Desktop.
3. Close all open applications.
4. Double-Click on the downloaded mbam-setup.exe to start the installation. If unable to execute, infections on computer is preventing it from running, rename the file mbam-setup.exe to anything (like myfile.exe)
5. Run the installation on the default settings. No changes are necessary.
6. Just before completing the installation, make sure that the following are marked check.
– Update the program
– Launch the program
7. The tool will run and update itself after installation. Close it after the update.
8. Restart your computer in SafeMode
– After Power-On the computer, just before Windows start, press F8
– From the selections, Select SafeMode
9. Click on the icon and start to Perform Full Scan to begin scanning your computer for Smart Virus Eliminator related files.
10. After scanning, a message will appear stating that the scan is completed successfully. Click OK.
11. Click Show Results and detected threats will be displayed.
12. Make sure that all threats are marked check, then click Remove Selected to begin removal of the malicious files.
13. Exit AntiMalware Apps and restart your computer.
14. Smart Virus Eliminator and all its files are now removed from your computer. To guard your computer from this threat and avoid future infections, you may want real-time protection from a full version of anti-malware program..
