System Smart Security

What is System Smart Security?

System Smart Security is the latest in a long line of rogue / fake security clients. This type of a virus is known as malware. It's a fake program that is passing it's self off as a legitimate anti-virus client.

 How Did I get infected with System Smart Security?

Like most malware clients on the market there are many different ways a user can get infected. They can be tricked into installing the virus by being made to think the program they are installing is video update or security update. Users may also not have proper anti-virus protection on their computer. The latter is very common. Most anti-virus clients do not provide ample up front protection and never have the latest updates. They are stripped down versions of the paid antivirus client.

What is System Smart Security Doing to My Computer Right Now?

System Smart Security will most likely follow the same path that other clones of this malware have done. It will block you from running / installing other programs on your computer until you remove the bogus security program or make a purchase of the program. It will show exaggerated and false scan results as well as error messages made to scare you into making a purchase. Just know that it's all a scam and the warnings the program gives are false claims. At this time and in our testing's we found no indication of this program being a bot, trojan banker or keylogger. However this does not mean you don't have other trojans and viruses on your computer besides the System Smart Security client

System Smart Security

» Download System Smart Security Removal Software

What Do I Do To Remove System Smart Security?

Your first step is to follow our manual guide below to remove System Smart Security. The guide works and we try to keep it updated with the help of our users and you. Be sure you post any new file paths so we can update the guide if you find one. You should also start by running a scan with Spyware Doctor with Antivirus in Safe Mode with Networking.

Automatic System Smart Security Removal

Online System Smart Security Removal Service

Remove Proxy Setting so You Can Connect to the Internet Again. Some need this some do not.

System Smart Security Manual Removal Procedures

The first step you must take in order to remove System Smart Security is to stop the following process. Watch the video for guidance.

• SystemSmartSecurity.exe ( Most likely will change and be unique to your computer )
• lssra_259.exe ( Will most likely be unique file trace )
•  

Know File Path Locations

XP

• C:\Documents and Settings\All Users\Application Data\Unique File Trace\
• C:\Documents and Settings\Application Data\System Smart Security\

Vista / Windows 7: One of the below

• C:\Users\YOUR USER NAME\AppData\Unique File Trace\
• C:\Users\YOUR USER NAME\AppData\

To Stop this process you can

A. Browse to the file location shown below and re-name the file first and then restart your computer. Then browse to that file location again and delete the file. Take note that you can sort the files by date and help rule out most files and folders. Chances are you will only have a few files that appear within the date range you first became infected.

B.  Boot into Safe Mode and delete the file

C: Start the Task Manager the very second you login and terminate the process that way.

D:  Log-into another users account and see if you can delete the file.

We highly recommend you also attempt a scan with Spyware Doctor with Antivirus in Safe Mode with Networking. You can boot into safe mode with networking then come back to the RemoveVirus.org website and download the Anti-virus client.

The next step in System Smart Security removal is to delete the following file. You NEED to re-boot your computer first if you re-named the file as you can not remove a file that is running.

KNOWN LOCATIONS OF THIS VIRUS

XP

• C:\Documents and Settings\All Users\Application Data\Unique File Trace\SystemSmartSecurity.exe

Vista / Windows 7: One of the below

• c:\users\[username]\AppData\\System Smart Security\SystemSmartSecurity.exe
• C:\Users\YOUR USER NAME\AppData\Local\Temp\
• C:\Users\[Username]\AppData\

Once you have deleted the above executable, System Smart Security will no longer be running. At this time you need to run a full virus scan. RUN THE  SCAN!. We recommend Spyware Doctor with Antivirus. You need to ensure no other viruses are on your computer.

If you find this threat too hard to remove yourself and need an expert we recommend this computer repair service. They charge far less than others and are great at what they do.

System Smart Security Registry Removal Procedures

PLEASE NOTE: Editing the registry can cause your operating system to become corrupt and unstable. Doing so may result in data loss. It is recommended that you let your antivurs client handle the cleaning of the Windows registry or you can use a registry cleaner like PC Health Advisor Here.

Here are the registry traces for your reference only

• HKEY_CLASSES_ROOT\PersonalIS.DocHostUIHandler
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = '1'
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:25553"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Smart Security Registry"
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options "Debugger" = "svchost.exe"
• HKEY_CURRENT_USER\Software\3
• HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
• HKEY_CLASSES_ROOT\PersonalIS2011.DocHostUIHandler
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = '1'
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = 'http=127.0.0.1:25401'
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "UID" = '7'
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "88780570603"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Smart Security Registry"HKEY_CURRENT_USER\Software\Microsoft\Internet
• Explorer\Download "CheckExeSignatures" = 'no'

System Smart Security Directories:

XP

• C:\Documents and Settings\All Users\Application Data\

Windows 7 / Windows Vista

• %AppData%\Microsoft\Internet Explorer\Quick Launch\System Smart Security.lnk
• %AppData%\System Smart Security\
• %AppData%\System Smart Security\IcoActivate.ico
• %AppData%\System Smart Security\IcoHelp.ico
• %AppData%\System Smart Security\IcoUninstall.ico
• %AppData%\System Smart Security\Security Solution.exe
• %AppData%\System Smart Security\securityhelper.exe
• %AppData%\System Smart Security\securitymanager.exe
• %Temp%\ ( REMOVE ALL TEMP FILES )
• %UserProfile%\Start Menu\Programs\System Smart Security.lnk
• %StartMenu%\Programs\System Smart Security\
• %StartMenu%\Programs\System Smart Security\Activate System Smart Security.lnk
• %StartMenu%\Programs\System Smart Security\Help System Smart Security.lnk
• %StartMenu%\Programs\System Smart Security\How to Activate System Smart Security.lnk
• %StartMenu%\Programs\System Smart Security\System Smart Security.lnk

Conclusion

The removal of System Smart Security can be a little hard. Most users will find if they reset their proxy settings first and then stop the main executable and then install and run Spyware Doctor with Antivirus they have the best chance at picking up this virus and removing it. We also do recommend Spyware Doctor with Antivirus as an alternative security client to use. Malware Bytes should work well on this malware threat as well. Again to have an expert remove this threat for you, you can go to this computer repair site.

Related Article Keywords: System Smart Security, Remove System Smart Security, System Smart Security Removal, How to Remove System Smart Security