1. What is Security Master AV?
Security Master AV is a deceptive software that is installed on computer without user's agreement for harmful purposes. The program uses deceptive tactics to convince victim that the system is infected with viruses. By displaying misleading information about computer system, Security Master AV tricks user into purchasing fake software.
First, computer gets infected by a Trojan and then Security Master AV is downloaded. Along with rogue program, a number of harmless but useless files will be dropped on hard drive, so that later they can be detected as virus objects by the fake program's scanner. Security Master AV will initiate computer scan each time Windows are started. At the end of each scan the report will be generated, stating that a number of threats have been found. User will be offered to clean the computer by pressing "Clean Now" button, which when clicked will redirect the user to an insecure payment page, where user will be asked to buy the license for the program.
To cause the confusion user will be attacked by various messages titled "System alert", saying that "suspicious software which may be malicious has been detected" or warnings that identity theft attempt has been detected. All messages that has been caused by Security Master AV should be ignored as all of them lead to the purchase of counterfeit program license.
First, computer gets infected by a Trojan and then Security Master AV is downloaded. Along with rogue program, a number of harmless but useless files will be dropped on hard drive, so that later they can be detected as virus objects by the fake program's scanner. Security Master AV will initiate computer scan each time Windows are started. At the end of each scan the report will be generated, stating that a number of threats have been found. User will be offered to clean the computer by pressing "Clean Now" button, which when clicked will redirect the user to an insecure payment page, where user will be asked to buy the license for the program.
To cause the confusion user will be attacked by various messages titled "System alert", saying that "suspicious software which may be malicious has been detected" or warnings that identity theft attempt has been detected. All messages that has been caused by Security Master AV should be ignored as all of them lead to the purchase of counterfeit program license.
2. Security Master AV screen shot:
3. How to remove Security Master AV:
- Internet connection might be disabled or Internet browser might be blocked by Security Master AV, so it won't be possible to download any files to infected computer. In this case please download all files required for Security Master AV removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
- To remove Security Master AV download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
-
After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:
-
After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove Security Master AV.
- Restart the computer to complete Security Master AV removal procedure.
4. Security Master AV files:
SM<random>.exe5. Hijackthis entries:
O4 - HKCU\..\Run: [Security Master AV] "C:\Documents and Settings\All Users\Application Data\7883ae6\SM7883.exe" /s /d |