One of the common ways of spreading computer infections is through the use of fake online scanners that lure unsuspecting PC users into thinking that there are many problems with their computers. This is also the way in which Windows Smart Warden is transferred to targeted machines to mislead their users into thinking this is a legitimate and reliable AV tool that can detect computer problems and system errors. Windows Smart Warden imitates a genuine AV tool. In fact, it is aimed at deceiving unsuspecting users into thinking their computers are seriously compromised. The truth is that Windows Smart Warden is not able to ensure that your personal and financial information is protected. On the contrary, this malicious intruder will make it possible for other deceitful applications to gain access to your system and infect it without your knowledge or approval. Windows Smart Warden will turn your machine into a complete mess. It will not allow you to load legitimate AV programs. Moreover, it will try to hijack your browser and make it impossible for you to visit security-related web pages.
Figure 1. Windows Smart Warden GUI
Windows Smart Warden is a relative of Security Sphere 2012. Windows Smart Warden is another fake security application that sneaks without the knowledge of the PC user and roots itself deep into the targeted system. If you wonder how Windows Smart Warden has managed to gain access to your computer, you have to know that there are two ways that Windows Smart Warden uses to enter into the system. The first option is to exploit vulnerabilities in programs running on targeted machines in order to transfer the infection to the PC without any problems. The other way Windows Smart Warden uses to sneak into computers is also very tricky. There are compromised web pages that offer free online scans. If a person is misled into scanning his system with such a fake scanner, the results will show many compromised files that need to be removed. To fix the system, the user will be offered to download some unknown application. He is not aware that Windows Smart Warden will be transferred to his computer and will be able to start its malicious plan.
Download SpyHunter’s* Malware Scanner to Detect
|
Windows Smart Warden will be loaded automatically on system start up. After that, it will create many compromised files that will be stored in some hidden location. Windows Smart Warden will display many frightening messages. They will warn the user about serious computer problems and system errors. The person will be told that he has to take immediate actions to protect his PC, otherwise he may lose the information stored on it. Not only that, but the computer may even crash. The messages will show the following information about the state of the system:
Windows Smart Warden Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC. Click here to remove them immediately with Windows Smart Warden.
Windows Smart Warden Warning
Your computer is still infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid theft of your credit card details. Click here to activate protection.
Windows Smart Warden will make a scan of the system. The application will pretend that the results are reliable and accurate. Windows Smart Warden will report many infected files that need to be removed immediately. However, Windows Smart Warden will not allow the user to delete the files without buying the full version of the application. Windows Smart Warden will redirect the victim to its billing web page and try to mislead him into paying for the registered program.
As you can see, the aim of intruder is to deceive you into giving your money to this attacker. Do not be tricked and remove Windows Smart Warden as soon as you can.
Windows Smart Warden Manual Removal Instructions:
Stop These Windows Smart Warden Processes:
(Learn how to do this)
(Learn how to do this)
%appdata%\protector-.exe
Remove These Windows Smart Warden Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
