Virus RemovalIf You Need Expert Help we recommend you hire a Ninja! Ninja's are well trained in the art of virus removal and can remove all threats from your computer right now. See this Computer Repair site or check out www.pcninja.com for live help.

Remove Security Master AV

Security Master AV is a widespread fake security software application which is related to My Security Engine and Cleanup Antivirus. Similarly to its relatives, Security Master AV uses scare tactics to push users into purchasing a license for the software. This rogue program gets installed on user systems through Trojans that get downloaded from malicious websites which claim to contain essential video codec packs. Once installed, Security Master AV disables any antivirus software present on the system, as well as system utilities such as task manager and registry editor. Once it has ensured that the user cannot attempt to manually remove it, this rogue application will then proceed to perform a large number of fake scans on the user’s system, claiming that it is heavily infected with malicious software. It will also display endless pop-ups from the Windows taskbar, falsely warning the user of virus threats. Finally Security Master AV will proceed to urge the user to purchase a license to the ‘full’ version of the software, claiming that the currently installed ‘trial’ version is not up to the task of cleaning out all the detected ‘viruses’. However, no user should fall for this trick, as the ‘full’ version of Security Master AV is just as incapable of scanning or cleaning any computer system as the ‘trial’ version is.

Security Master AV

Security Master AV

» Download Security Master AV Removal Software

As soon as you find a copy of this malicious software installed on your computer, you should take steps to delete Security Master AV. Security Master AV removal involves the stopping of processes, unregistering of DLLs, removal of files and folders and the deletion of registry entries. However, before attempting this you should restart your computer in Safe Mode.

Automatic Security Master AV Removal

Online Security Master AV Removal Service

computer repair

Security Master AV Removal ( Manual Removal Procedures )

The first step you need to take in order to delete Security Master AV is to stop the following processes:

  • SM8d7c.exe
  • ANTIGEN.exe
  • std.exe
  • SM345d.exe

 

Next, it is necessary to unregister the following DLL files to continue with Security Master AV removal:

  • cid.dll
  • ddv.dll
  • runddlkey.dll
  • sqlite3.dll
  • mozcrt19.dll

The next step that has to be taken to remove Security Master AV is the deletion of the following files and folders:

Windows XP:

  • %CommonAppData%8d7ca1125.mof
  • %CommonAppData%8d7ca11SM8d7c.exe
  • %CommonAppData%8d7ca11SMAV.ico
  • %CommonAppData%8d7ca11SMAVSysvd952342.bd
  • %AppData%MicrosoftInternet ExplorerQuick LaunchSecurity Master AV.lnk
  • %AppData%Security Master AVcookies.sqlite
  • %Desktop%Security Master AV.lnk
  • %UserProfile%RecentANTIGEN.drv
  • %UserProfile%RecentANTIGEN.exe
  • %UserProfile%Recentcid.dll
  • %UserProfile%RecentCLSV.drv
  • %UserProfile%RecentDBOLE.sys
  • %UserProfile%Recentddv.dll
  • %UserProfile%Recentddv.sys
  • %UserProfile%Recentenergy.tmp
  • %UserProfile%RecentFS.drv
  • %UserProfile%Recentgid.drv
  • %UserProfile%RecentPE.drv
  • %UserProfile%RecentPE.exe
  • %UserProfile%RecentPE.sys
  • %UserProfile%RecentPE.tmp
  • %UserProfile%Recentstd.exe
  • %UserProfile%Recenttjd.drv
  • %UserProfile%Recenttjd.sys
  • %UserProfile%Recentrunddlkey.dll
  • %StartMenu%Security Master AV.lnk
  • %StartMenu%ProgramsSecurity Master AV.lnk
  • c:Documents and SettingsAll UsersApplication Data345d567
  • c:Documents and SettingsAll UsersApplication Data345d56716.mof
  • c:Documents and SettingsAll UsersApplication Data345d567mozcrt19.dll
  • c:Documents and SettingsAll UsersApplication Data345d567SM345d.exe
  • c:Documents and SettingsAll UsersApplication Data345d567SMAV.ico
  • c:Documents and SettingsAll UsersApplication Data345d567sqlite3.dll
  • c:Documents and SettingsAll UsersApplication Data345d567Quarantine Items
  • c:Documents and SettingsAll UsersApplication Data345d567SMAVSys
  • c:Documents and SettingsAll UsersApplication Data345d567SMAVSysvd952342.bd
  • c:Documents and SettingsAll UsersApplication DataSMNPCTCAV
  • c:Documents and SettingsAll UsersApplication DataSMNPCTCAVSMMPIBBZGHAV.cfg
  • %UserProfile%Application DataMicrosoftInternet ExplorerQuick LaunchSecurity Master AV.lnk

Windows Vista / Windows 7:

  • %CommonAppData%8d7ca1125.mof
  • %CommonAppData%8d7ca11SM8d7c.exe
  • %CommonAppData%8d7ca11SMAV.ico
  • %CommonAppData%8d7ca11SMAVSysvd952342.bd
  • %AppData%MicrosoftInternet ExplorerQuick LaunchSecurity Master AV.lnk
  • %AppData%Security Master AVcookies.sqlite
  • %Desktop%Security Master AV.lnk
  • %UserProfile%RecentANTIGEN.drv
  • %UserProfile%RecentANTIGEN.exe
  • %UserProfile%Recentcid.dll
  • %UserProfile%RecentCLSV.drv
  • %UserProfile%RecentDBOLE.sys
  • %UserProfile%Recentddv.dll
  • %UserProfile%Recentddv.sys
  • %UserProfile%Recentenergy.tmp
  • %UserProfile%RecentFS.drv
  • %UserProfile%Recentgid.drv
  • %UserProfile%RecentPE.drv
  • %UserProfile%RecentPE.exe
  • %UserProfile%RecentPE.sys
  • %UserProfile%RecentPE.tmp
  • %UserProfile%Recentstd.exe
  • %UserProfile%Recenttjd.drv
  • %UserProfile%Recenttjd.sys
  • %UserProfile%Recentrunddlkey.dll
  • %StartMenu%Security Master AV.lnk
  • %StartMenu%ProgramsSecurity Master AV.lnk
  • c:Users%USER%AppData345d567
  • c: Users%USER%AppData 345d56716.mof
  • c: Users%USER%AppData 345d567mozcrt19.dll
  • c: Users%USER%AppData 345d567SM345d.exe
  • c: Users%USER%AppData 345d567SMAV.ico
  • c: Users%USER%AppData 345d567sqlite3.dll
  • c: Users%USER%AppData 345d567Quarantine Items
  • c: Users%USER%AppData 345d567SMAVSys
  • c: Users%USER%AppData 345d567SMAVSysvd952342.bd
  • c: Users%USER%AppData SMNPCTCAV
  • c: Users%USER%AppData SMNPCTCAVSMMPIBBZGHAV.cfg
  • %UserProfile%Application DataMicrosoftInternet ExplorerQuick LaunchSecurity Master AV.lnk

If you find this threat too hard to remove yourself and need an expert we recommend www.pcninja.com . They charge far less than others and are great at what they do.

Security Master AV Removal of Registry Items

File deletion alone is not sufficient to completely remove Security Master AV. The following keys and settings should be removed from the Windows Registry for complete Security Master AV removal:

  • HKEY_CURRENT_USERSoftware3
  • HKEY_CLASSES_ROOTSMAVSys.DocHostUIHandler
  • HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “Security Master AV”
  • HKEY_CLASSES_ROOTCLSID{3F2BBC05-40DF-11D2-9455-00104BC936FF}
  • HKEY_CLASSES_ROOTSM345d.DocHostUIHandler
  • HKEY_USERS.DEFAULTSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
  • HKEY_CURRENT_USERSoftwareClassesSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
  • HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = "1"
  • HKEY_CLASSES_ROOTSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
  • HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "CheckExeSignatures" = "no"

Now it is safe to say that Security Master AV will no longer plague your system. Be sure to run a full security scan using Spyware doctor with Antivirus to ensure you have no other infections and to make sure you got everything above.

Remove Security Master AV Directories:

  • No direct folders that absolutely need to be removed/

Conclusion

Inexperienced users are advised against attempting to delete Security Master AV manually, as any mistake made during removal could result in damage to the operating system. Therefore inexperienced users are advised to use a web-based repair service such as www.pcninja.com or legitimate antivirus software such as Spyware Doctor with Antivirus to completely and safely remove Security Master AV.

Related Article Keywords: Security Master AV, Remove Security Master AVSecurity Master AV Removal, How to Remove Security Master AV

VN:F [1.9.10_1130]
Rating: 0.0/10 (0 votes cast)
VN:F [1.9.10_1130]
Rating: -1 (from 1 vote)
  • denise

    i have this security master av on my computer, but i am haveing trouble getting rid of it. it stops loading 3/4 of the way thru.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    Hi Denise,

    It’s good that Security Master AV does not fully load. That should make it that much easier to remove. Do you have a specific question about the guide? What section are you having troubles with and what have you already been able to do?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    Task manager & mcafee are not working after removal of Security Manager AV. How can I get them to work again?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    Read our tutorial on how to kill a process under the how to guides.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    I can no longer get to the task manager. How do I stop processes without getting to the task manager?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Beach

    My task manager doesn’t open any more due to Security Master AV. Can you please help me stop the processes with out the task manager.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    Read our guide on how to sop proccess and download the process killing software in the guide. It’s under the How to Guides and Software. You may also just be able to boot into safe mode and delete the file.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • tisha

    Ugh i cannot believe i just walked into this..
    so when i use this download software removal
    it should jus come right off right??

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    Yes and no. It all depends how infected you are. If other viruses are installed on the system that prevent the install or download of the client. Every case is a little different. I can say that in our testings Spyware Doctor with Antivirus did remove this virus from our test computers.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    •SM8d7c.exe
    •ANTIGEN.exe
    •std.exe
    •SM345d.exe

    These are not listed in processes? Help?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    The thing mutated most likely. If you can boot into safe mode with networking I would do that and run a full scan with Spyware Doctor with Antivirus. While you would have to pay for the software to actually remove threats. You can run it’s free scan and let it find the needed traces for you to remove. Then just manually remove them.

    You may also want to look in these directories.

    c:\Users\%USER%\AppData\random 7 characters\
    c:\Documents and Settings\All Users\Application Data\random 7 characters\

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    I share a computer with my family and my profile is the only one infected. Will deleting my profile and making a new one get rid of the virus?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    I tried Spybot and Spyware Doctor. Neither worked. Then a friend told me about Malwarebytes. Downloaded the free version while in safe mode, took about 2 hours and its gone. Completely Gone. Thought I would share the very helpful information.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Anonymous

    Try Malwarebytes free download. Download it in safe mode. Worked like a dream.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    The tace files and registry files will still be on the computer. Not to mention you may have several other viruses installed on the computer and not even know it. However it can significantly help to remove that user profile. It often stops these fake security clients. You still need to run a full security scan.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    We recommend Malwarebytes on the site. It’s our second favorite client. However Spyware Doctor with Antivirus does pick up more traces from our experience.

    We need to note that the free MAlwarebytes client like almost ALL free clients does not offer protection against threats. It is not active protection. Free clients are just stripped down versions of the real thing. If you choose to use malwarebytes that is 100% fine. We always run a scan using this security client. However we use the paid version. We also do not use it as the main client to run scans. We first use Spyware Doctor with Antivirus.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    We just tested the SDA client today and it worked in picking up the Security Master AV files. Did you first update Spyware Doctor with Antivirus? If you did not update the security client after you installed it then that is why it did not pickup the traces.

    We do like Malwarebytes. It’s our second favorite client. However the Free version offers no live protection. It’s simply a stipped down version of the real thing. That is why we always recommend you run a scan with Spyware Doctor with Antivirus as well. While the free trial does not remove threats it will show you what you are infected with. After we manually remove the threats we then run a scan with Malwarebytes to double check things.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • Charlyse

    so since i have the security master thing installed, and its a virus, does that mean that the warnings are true? the things that pop up saying i have multiple viruses? do i really have them because rite now its up to about 100. and i have another thing installed to rid of them, but when i run Mcafee it says theres nothing, yet the security master says about 100. . what should i do?

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
  • technical admin

    The guide could not be more clear in answering this question. Yes the scan results are fake like the removal guide states. We also tell you exactly what needs to be done. Follow the guide. If you have specific questions on not being able to do a step then please ask that. Other wise the guide works. It’s how we remove it from all our test computers.

    VA:F [1.9.10_1130]
    Rating: 0.0/5 (0 votes cast)
    VA:F [1.9.10_1130]
    Rating: 0 (from 0 votes)
RemoveVirus.org cannot be held liable for any damages that may occur from using our community virus removal guides. Viruses cause damage and unless you know what you are doing you may loose your data. We strongly suggest you backup your data before you attempt to remove any virus. Each product or service is a trademark of their respective company. We do make a commission off of each product we recommend. This is how removevirus.org is able to keep writing our virus removal guides. All Free based antivirus scanners recommended on this site are limited. This means they may not be fully functional and limited in use. A free trial scan allows you to see if that security client can pick up the virus you are infected with.