print version

Security Master AV

For Information and Removal of Security Master AV

Security Master AV

As more and more of our lives move online, the need for greater security is obvious.  It is exactly this need that rogue antivirus programs target.  Rogue programs like Security Master AV know that we need protection, and they know that any threat to our data or systems is taken very seriously.  They count on this.  What they don't count on is you knowing how to thwart them.  It's as easy as recognizing them.

How do you recognize a rogue antivirus program like Security Master AV?  These programs, while they go by a myriad of different names, depend on the same tools and tactics to operate.  Their goal is to persuade computer users that there are security threats in their systems.  While there is no threat to the computer, except, of course, for the presence of Security Master AV, they seek to create this illusion by issuing pop-up warning messages and false security scans.  Any issues you are experiencing with your system are likely the result of Security Master AV's presence. 

Security Master AV is related to rogues My Security Engine and CleanUp Antivirus.

Rogue antivirus programs may be obvious to those who know how to spot them, but they are really very sophisticated programs.  They depend on Trojans for a ride into your system. Trojans, as we know, are vehicles which carry in various forms of malware, including rogue antivirus programs.  These vehicles tend to park in sites that contain social networking, freeware, videos, images, adult, gaming, trending, and pirated content, and even the act of visiting the site itself is sometimes enough to allow the Trojan to enter.  Trojans disguise themselves to gain access, and once there, it deposits Security Master AV.  From there, the rogue goes into a dormancy stage in which it alters your current security settings. 

It is also possible for users to install Security Master AV themselves because they are concerned about their computer's safety and want to ensure their systems and data are secure.  Unfortunately, this program will not protect your computer, nor will it resolve the problems it has caused.

Having changed your security settings, Security Master AV is allowed to run unimpeded in your system.  The first sign of its activity that you are likely to notice is the sudden influx of pop-up ads.  These usually take one of two forms: a security warning message or a false scan results window.  The warning messages are designed to mimic those issued by legitimate security programs, and sometimes you can tell right away that it is a rogue because of the misspellings and odd syntax.  In the case of Security Master AV, the warnings appear relatively well-written and believable:

System alert

Suspicious software which may be malicious has been detected on your PC.  Click here to remove this threat immediately using Security Master AV.

And:

Warning!  Identity theft attempt detected

Hidden Connection IP:

Security Risk:  High

Target: Microsoft Corporation Keys

However, always take the time to look for the name of the issuing program, and learn what the messages from your installed security program look like and how they will be issued.  This will help you avoid rogues.

The results scans, too, mimic those from legitimate security programs, but have "Security Master AV" clearly printed in the top left corner, as well as below where you are urged to activate it.  The scan will list several "threats" it has found, all of which, you can be assured, are false.

Other common signals that a rogue has entered your system include slowed computer performance, new icons on your desktop or system tray, and frequent redirects or difficult navigating online. 

If left in your system, Security Master AV may exploit security vulnerabilities it has created in order to allow other forms of malware to enter.  Because of this, and the potential for system instability, it is important to remove Security Master AV as soon as possible.

Removing Security Master AV

Rogue antivirus programs are notoriously difficult to remove, and Security Master AV is no exception.  Basic steps like using the uninstall option or deleting icons Security Master has created do not work because this program is designed to evade these attempts.  Remember also that these programs are not viruses, so your installed software is likely to be ineffective at detection and removal.  There are, however, two effective methods that computer users can pursue: automatic and manual.

Removing Security Master AV automatically via a program like Malwarebytes Anti-Malware (Malwarebytes has free malware removal)  is the recommended method.  It is easy, quick, convenient, and safe.  There is no risk that you will inadvertently delete necessary files or miss a file or registry key associated with Security Master AV (which allows it to repair itself), which is the risk with manual removal. Manual removal is only recommended for those with technical experience - and a great deal of time.  If you have these, try the following to remove Security Master AV:

Stop Processes:

SM345d.exe
DBOLE.exe
sld.exe

Remove Registry Values:

HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\SM345d.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Security Master AV"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"

Delete DLLs:

c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
%UserProfile%\Recent\ANTIGEN.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\exec.dll
%UserProfile%\Recent\PE.dll
%UserProfile%\Recent\runddl.dll

Delete Files:

c:\Documents and Settings\All Users\Application Data\345d567\16.mof
c:\Documents and Settings\All Users\Application Data\345d567\SM345d.exe
c:\Documents and Settings\All Users\Application Data\345d567\SMAV.ico
c:\Documents and Settings\All Users\Application Data\345d567\SMAVSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\SMNPCTCAV\SMMPIBBZGHAV.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Master AV.lnk
%UserProfile%\Application Data\Security Master AV\cookies.sqlite
%UserProfile%\Desktop\Security Master AV.lnk
%UserProfile%\Recent\DBOLE.exe
%UserProfile%\Recent\DBOLE.tmp
%UserProfile%\Recent\ddv.sys
%UserProfile%\Recent\energy.tmp
%UserProfile%\Recent\FS.sys
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\runddl.sys
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\sld.drv
%UserProfile%\Recent\sld.exe
%UserProfile%\Recent\sld.sys
%UserProfile%\Recent\tempdoc.tmp
%UserProfile%\Recent\tjd.tmp
%UserProfile%\Start Menu\Security Master AV.lnk
%UserProfile%\Start Menu\Programs\Security Master AV.lnk

Delete Folders:

c:\Documents and Settings\All Users\Application Data\345d567\
c:\Documents and Settings\All Users\Application Data\345d567\Quarantine Items\
c:\Documents and Settings\All Users\Application Data\345d567\SMAVSys\
c:\Documents and Settings\All Users\Application Data\SMNPCTCAV\
%UserProfile%\Application Data\Security Master AV\

Removing Security Master AV Automatically/Safely

For free automatic removal we recommend using Malwarebytes Anti-Malware. This program is widely recommended by reputable third-party sites, so you can be reasonably confident of its ability to safely get rid of Security Master AV and any hidden Trojans. As a precaution we recommend double checking your system with Spyware Doctor. This program requires paid registration to enable deletions, however it has a money back guaranteed and is the top of the line in malware removal. It should catch malware that evades Malwarebytes and block anything that tries to reinstal itself.

Remove Security Master AV Now:

1. Download and install Malwarebytes Anti-Malware and Spyware Doctor  
2. Run a scan with Malwarebytes Anti-Malware.
3. Remove all the detected infections (free).
4. Run a scan with Spyware Doctor
5. Remove any remaining infections
6. Reboot and rescan with Spyware Doctor. Your computer should now be clean.

Important note: If Malwarebytes is blocked by malware then run Chameleon (Start Menu → All Programs → MalwareBytes' Anti-Malware → Tools → Malwarebytes' Anti-Malware Chameleon). If you need further help removing Security Master AV please email us at info@removeadware.com.au or call for personal assistance on toll-free number 888-655-3453, within the USA and Canada.

 to top