Information about Smart Engine
Smart Engine is a rogue antispyware program designed by cyber criminals in order to rip computer users off. The program is infiltrated to computer system through Trojan viruses that pretend to be video codec or some updates that are necessary in order to watch videos online.
When Smart Engine is installed and computer is restarted, the application immediately starts scanning the system. After a few minutes, it generates a list of infections and claims that they must be removed as soon as possible in order to avoid more damage done to your system. The truth is that Smart Engine displays files that have been created by the same Trojan that installed Smart Engine to the system. These files are completely harmless; however, Smart Engine will try to prove you the opposite.
The main goal of this rogue program is to sell its so called full version of the program. So basically it attempts to prove that purchasing Smart Engine is the only solution to fix all problems that damage your system. Additionally to the activity of a fake scanner Smart Engine causes tons of security notifications displayed on the desktop which look like this:
System Alert
malicious applications, which may contain Trojans, were found on your computer and are to be removed immediately. Click here to remove these potentially harmful items using Smart Engine.
System Alert
Firewall has blocked a program from accessing the Internet.
Internet Explorer
C:\Program Files\Internet Explorer\Iexplore.exe
Lsas.Trojan-Spy.DOS.Keycopy is suspected to have infected your PC. This type of virus intercepts entered data and transmits it to a remote server. Data interception was detected while visiting a website.
Warning
Warning! Virus detected
Threat Detected: Trojan-PSW.Win32.Delf.d
Despite the fact that they all claim your system contains infections you should simply ignore them. The only infection that is definitely on your system is Smart Engine itself. You are strongly advised to get rid of Smart Engine once you notice any of the above mentioned signs.
Parasite images
Smart Engine Facts
- Smart Engine pretends to increase security of your PC
- Smart Engine free version will show popups, alerts and fake results to convince you to pay
- Smart Engine creators will not deliver license keys upon paying or the full version will not be functional
- Smart Engine might be used to download and advertise other malicious software
- Smart Engine might disable some of your PCs or its programs functions
Manual Smart Engine removal instructions
SmartEngine.exe
HKEY_CLASSES_ROOT\MSSSys.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Smart Engine”
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:25437"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "Version/10.02129"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "DisallowRun" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Smart Engine"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=2129&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
%Documents and Settings%\All Users\Application Data\[random]\853.mof
%Documents and Settings%\All Users\Application Data\[random]\SmartEngine.exe
%Documents and Settings%\All Users\Application Data\[random]\SM[random].exe
%Documents and Settings%\All Users\Application Data\[random]\SM[random].exe e.g. SM17a_2211.exe
%Documents and Settings%\All Users\Application Data\[random]\SME.ico
%Documents and Settings%\All Users\Application Data\[random]\SMYEFE\
%Documents and Settings%\All Users\Application Data\[random]\SMYEFE\SMYEFE.cfg
%Documents and Settings%\All Users\Application Data\[random]\Quarantine Items
%Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\Smart Engine.lnk
%Documents and Settings%\[UserName]\Application Data\Smart Engine\
%Documents and Settings%\[UserName]\Application Data\Smart Engine\Instructions.ini
%Documents and Settings%\[UserName]\Desktop\Smart Engine.lnk
%Documents and Settings%\[UserName]\StartMenu\Smart Engine.lnk
%Documents and Settings%\[UserName]\StartMenu\Programs\Smart Engine.lnk
on Windows 7 check AppData, AppData\Local or AppData\Roaming folders instead of Application Data






No comments yet

