RemoveAdware.Com.Au

Smart Engine

Kudos:

"You guys rock. Your instructions were spot on! Thank You"
- J. Powell

"I was infected by SystemTool today. Thanks for the help on the page. I have removed it completely"
- L. Lepsøe

"Your web page on Regclean was extremely helpful and very, very education. Its objectivity to was nothing short of excellent. Thank you..."
- Anthony G. Muya

"I want to express my thanks for the information on removing the browser hijacker. I took the steps you suggested and the follow-on precautions to prevent future infections... Thanks again"
- Carlos


For Information and Removal of Smart Engine

    - what is Smart Engine
    - automatic and manual removal instructions
    - personal assistance provided online or by phone to safely remove Smart Engine.

  22nd October 2010

Make Smarter Choices Without Smart Engine

The axiom for years has held that you should "Work Smarter, Not Harder," but one security tool that claims to help you do just that is far from the choice you want protecting your machine. It's called Smart Engine, and it's a rogue antivirus software that can do little to actually help you keep your machine safe from many of the online predator programs. In fact, because it's rogue security software, it's not even designed to be helpful. The program simply doesn't support the removal of real security problems, so removing it at your first opportunity is an absolute must.

Why You Have Smart Engine

As soon as you realize that it's been installed on your machine, one of the first questions you may ask yourself is how it got there in the first place, and there's probably a good reason for it. Most users report encountering it while they were trying to watch a video at a certain website. In many cases, before they could even play the video, a box popped up asking them to download a video codec or update their video player software. Instead of this being an actual request, however, it was a Trojan, and once clicked, Smart Engine installed itself on your machine.

This is even true in cases where good antivirus solutions were present. Antivirus software can't protect you from programs like Smart Engine because they're not actually viruses. Instead, they're rogue security software, and antivirus software, even the best solutions, are designed to pick up on viruses, an entire class of malware. As such, they download definition files on a regular basis that allow them to deal with those programs, but applications like Smart Engine will never be part of virus definition files. Don't blame your virus software if you do have Smart Engine. It just wasn't designed to deal with problem programs like this one.

Smart Engine is actually part of a much larger family of programs. Called the Virus Doctor Family, there are a number of different names associated with this one, and it is possible to have more than one of them installed on your computer at once. Other names within the family include Smart Security, My Security Shield, Security Master AV, Fake Vimes, Ultra Antivirus 2009, Malware Catcher 2009, Virus Melt, Windows PC Defender, Live PC Care, Security Antivirus, Cleanup Antivirus, My Security Wall, Security Guard, My Security Engine, and Paladin Antivirus. All of these programs display very similar properties, so much of the information you'll find about Smart Engine also applies to these programs as well. In some cases, these are literally aliases of the exact same program.

Deciding if You Have Smart Engine

If you do have Smart Engine installed on your computer, there are a number of different things you are going to notice right away.

The most prominent of these is the start-up security scans. Smart Engine literally starts as soon as you turn your machine on each day, and it does pop up, not only will it have a logo with its name emblazoned on it in the upper left corner, but you'll also see a shield across the right side with similar colors to the Windows safety application. Down the left side, you'll notice a number of navigational options including things like Home, Firewall, Automatic Updates, and Virus Protection. During the scan itself, you'll see a note across the top of the scan window that says "Quick Scan" with a blue box that says "Scanning . . .Please Wait." Once the scan is complete, it offers you a scan results window that offers you the number of infected items, as well as a list of each of those. It recommends that you remove all of those, but clicking on that box will lead you to a website where you can download the full version of the program.

In addition to the ongoing scans, you will also likely notice some warnings any time you try to run another application on your computer. Here are a few of the most prominent ones you may see:

System Alert

malicious applications, which may contain Trojans, were found on your computer and are to be removed immediately. Click here to remove these potentially harmful items using Smart Engine.

 

System Alert

Firewall has blocked a program from accessing the Internet

Internet Explorer

C:\Program Files\Internet Explorer\Iexplore.exe

Lsas.Trojan-Spy.DOS.Keycopy is suspected to have infected your PC. This type of virus intercepts entered data and transmits it to a remote server. Data interception was detected while visiting a website.

 

Warning

Warning! Virus Detected

Threat Detected: Trojan-PSW.Win32.Delf.d

These appear in two different forums. Some of them look like the Windows Notification balloons that often appear in your system tray next to your computer's clock. Others look like standard pop up advertisements. They appear in their own box in the center of your screen no matter what application you happen to be running at the time.

You may also see a "Live Care Agent" pop up in your system tray that says it's on in the background and monitoring your computer for ongoing problems.

Clicking on the agent or any of those messages will lead you directly to the home page for the program, and there you will be prompted to purchase the full version. Doing so, however, can't offer you the protection you need, even from the malicious software this program suggests you have. Smart Engine just isn't actually designed to repair any ongoing problems on your computer.

Removing Smart Engine

If you do discover that you have this program installed on your computer, one of the best steps you can take is to eliminate it from your system files. This, however, is a bit more difficult than it may seem, as it is sophisticated enough to hide from you when you try to get rid of it. It can disable almost any security application that you have installed, and it can even alter itself inside your computer's registry to remain hidden at all times. In most cases, though, you do have two different options to remove it from your system.

The first removal method is to manually handle it. This option can be a bit risky if you've never done it before, as you must edit both your computer's program files folder and the registry itself. If you do choose to pursue this option, you will find a list of affected registry keys and files at the end of this article. Additionally, you are welcome to contact us for additional assistance should you choose to manually remove it. We'll email you detailed instructions if you wish to move forward in this method. Keep in mind that you'll need to eliminate hidden files as well as those you can see, and to do that, you must change your Windows Explorer Settings. Just go to "Tools," then "Folder Options," then "View." Check the box for "Show hidden files and folders and uncheck "Hide Protected Operating System Files." You may want to change that later after you're done. Not sure how to get to your system's registry? Click the Start button, then click on the Run command. You'll need to type in regedit. Before you make any changes, however, make sure you have a backup copy ready.

Your other option, and perhaps your better one, is to scan your computer with a reliable antispyware tool. There are many great ones out there including Enigma's SpyHunter and Malwarebytes Anti-Malware (Malwarebytes has free malware removal) . Once you choose one that meets your needs, download it, install it, and allow it to update itself. From there, do a full scan of your machine, and it will automatically remove Smart Engine.

Even if you choose to manually remove the program from your system, make certain that you install good software to protect your machine in the future, and you may even want to do it right away so you can scan your machine and take a look at what you might have missed.

Files and Registry Keys Associated with Smart Engine:

c:\Documents and Settings\All Users\Application Data\ae01cc\

c:\Documents and Settings\All Users\Application Data\ae01cc\SMESys

c:\Documents and Settings\All Users\Application Data\SMIFGKMPDQE

c:\Documents and Settings\All Users\Application Data\ae01cc\61.mof

c:\Documents and Settings\All Users\Application Data\ae01cc\ae01cc42668ec8a22e4d0493aabb97d8.ocx

c:\Documents and Settings\All Users\Application Data\ae01cc\mozcrt19.dll

c:\Documents and Settings\All Users\Application Data\ae01cc\SMae0_2129.exe

c:\Documents and Settings\All Users\Application Data\ae01cc\SME.ico

c:\Documents and Settings\All Users\Application Data\ae01cc\sqlite3.dll

c:\Documents and Settings\All Users\Application Data\ae01cc\Quarantine Items\

c:\Documents and Settings\All Users\Application Data\SMIFGKMPDQE\

c:\Documents and Settings\All Users\Application Data\SMIFGKMPDQE\SMTKWKE.cfg

%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Smart Engine.lnk

%UserProfile%\Application Data\Smart Engine

%UserProfile%\Application Data\Smart Engine\cookies.sqlite

%UserProfile%\Desktop\Smart Engine.lnk

%UserProfile%\Recent\ANTIGEN.dll

%UserProfile%\Recent\ANTIGEN.drv

%UserProfile%\Recent\cid.tmp

%UserProfile%\Recent\CLSV.exe

%UserProfile%\Recent\CLSV.sys

%UserProfile%\Recent\DBOLE.drv

%UserProfile%\Recent\delfile.sys

%UserProfile%\Recent\eb.sys

%UserProfile%\Recent\energy.exe

%UserProfile%\Recent\exec.exe

%UserProfile%\Recent\fan.drv

%UserProfile%\Recent\kernel32.dll

%UserProfile%\Recent\pal.exe

%UserProfile%\Recent\PE.dll

%UserProfile%\Recent\ppal.drv

%UserProfile%\Recent\tempdoc.tmp

%UserProfile%\Start Menu\Smart Engine.lnk

%UserProfile%\Start Menu\Programs\Smart Engine.lnk       

HKEY_CURRENT_USER\Software\3

HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}

HKEY_CLASSES_ROOT\SMae0_2129.DocHostUIHandler

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"

HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures = "1"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:25437"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "Version/10.02129"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "DisallowRun" = "1"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Smart Engine"

HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"      



Removing Smart Engine Automatically/Safely

For free automatic removal we recommend using Malwarebytes Anti-Malware. This program is widely recommended by reputable third-party sites, so you can be reasonably confident of its ability to safely get rid of Smart Engine and any hidden Trojans. As a precaution we recommend double checking your system with SpyHunter. This program requires paid registration to enable deletions, however it has a money back guaranteed and is the top of the line in malware removal. It should catch malware that evades Malwarebytes and block anything that tries to reinstal itself.

Download SpyHunter

Remove Smart Engine Now:

  1. Download and install Malwarebytes Anti-Malware and SpyHunter Download  
  2. Run a scan with Malwarebytes Anti-Malware.
  3. Remove all the detected infections (free).
  4. Run a scan with SpyHunter
  5. Remove any remaining infections
  6. Reboot and rescan with SpyHunter. Your computer should now be clean.

Important note: If Malwarebytes is blocked by malware then run Chameleon (Start Menu → All Programs → MalwareBytes' Anti-Malware → Tools → Malwarebytes' Anti-Malware Chameleon). If you need further help removing Smart Engine please email us at info@removeadware.com.au or call for personal assistance on toll-free number 888-655-3453, within the USA and Canada.


Disclaimer: This webpage was created to provide information on Smart Engine and how to uninstall it. Manual removal instructions are intended for use by technical experts and should be used at your own risk. We do not own or endorse Smart Engine.






All content copyright 2006-2017, Bonobo Pty Limited. All Rights Reserved.
Privacy Policy | Terms Of Service