What is Security Master AV? How to Remove It?
- Type: Spyware
- Category: Rogue Programs
- Discovered: 3 June 2010
- Removal tools: Malwarebytes' Anti-Malware, Spyware Doctor
1. Introduction
Security Master AV is a deceptive software that is installed on computer without user's agreement for harmful purposes. The program uses deceptive tactics to convince victim that the system is infected with viruses. By displaying misleading information about computer system, Security Master AV tricks user into purchasing fake software.
First, computer gets infected by a Trojan and then Security Master AV is downloaded. Along with rogue program, a number of harmless but useless files will be dropped on hard drive, so that later they can be detected as virus objects by the fake program's scanner. Security Master AV will initiate computer scan each time Windows are started. At the end of each scan the report will be generated, stating that a number of threats have been found. User will be offered to clean the computer by pressing "Clean Now" button, which when clicked will redirect the user to an insecure payment page, where user will be asked to buy the license for the program.
To cause the confusion user will be attacked by various messages titled "System alert", saying that "suspicious software which may be malicious has been detected" or warnings that identity theft attempt has been detected. All messages that has been caused by Security Master AV should be ignored as all of them lead to the purchase of counterfeit program license.
First, computer gets infected by a Trojan and then Security Master AV is downloaded. Along with rogue program, a number of harmless but useless files will be dropped on hard drive, so that later they can be detected as virus objects by the fake program's scanner. Security Master AV will initiate computer scan each time Windows are started. At the end of each scan the report will be generated, stating that a number of threats have been found. User will be offered to clean the computer by pressing "Clean Now" button, which when clicked will redirect the user to an insecure payment page, where user will be asked to buy the license for the program.
To cause the confusion user will be attacked by various messages titled "System alert", saying that "suspicious software which may be malicious has been detected" or warnings that identity theft attempt has been detected. All messages that has been caused by Security Master AV should be ignored as all of them lead to the purchase of counterfeit program license.
2. Security Master AV removal tools:
- Malwarebytes' Anti-Malware (for the installation guide click here)
- Spyware Doctor (for the installation guide click here)
3. Screenshot:

4. Security Master AV files:
SM<random>.exe5. Hijackthis entries:
O4 - HKCU\..\Run: [Security Master AV] "C:\Documents and Settings\All Users\Application Data\7883ae6\SM7883.exe" /s /d