Windows Smart Warden

Windows Smart Warden removal guide

Windows Smart Warden is a bogus computer program which tries to scare computer users into buying it's non-existent full version. It comes from the same family of rogue security scanners as Windows Performance Catalyst, Windows Functionality Checker and many other. Internet criminals are changing the names of their fake programs but the core elements are left similar to Windows Smart Warden's predecessors. Most common method which is used to infect your computer with such bogus programs as this one is using a fake Flash player update.

Main window of Windows Smart Warden:

First an unsuspecting computer user is intimidated to watch some video with a flashy title, then he is asked to download an update for a flash player prior to watching this material, instead of a legitimate update computer is infected with Windows Smart Warden. You should always download updates for your installed software from legitimate sources only. When Windows Smart Warden installs itself on your PC it will start imitating a security scan, this process will end up in detection of Rootkits, Fraud Tools, Trojans etc. You should ignore this detection list, Windows Smart Warden is only trying to scare you into thinking that your computer is seriously infected with various spyware/malware threats. Notice that when you click "Remove All" button you will be asked to enter you banking information and purchase a licence from this program prior it could remove the detected security issues. Don't fall for this trick, Windows Smart Warden is a scam that is created with a sole purpose of stealing money from your credit card account. You shouldn't mistake this rogue program to a legitimate security suite, Internet criminals are using an interface similar to legitimate software to further trick you into thinking that you are dealing with a real security program. Ignore warning messages generated by Windows Smart Warden and remove it from your computer using this removal guide.

Windows Smart Warden removal:

Before downloading the remover for Windows Smart Warden click a question mark icon at the top of the main window of this program, choose "Activate Now" and enter this registration code: 0W000-000B0-00T00-E0020 This will enable blocked Windows functions and will make the further removal process much easier, after entering the activation code continue to downloading the spyware remover.

remover for Windows Smart Warden

If you can't download or run spyware remover try running registry fix (link below). It enables execution of programs. download registryfix.reg file, double click it, click YES and then OK.

Windows Smart Warden removal instructions (on infected computer):

1. Start your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

2. Open Internet explorer, click Tools and select Internet Options. Select "Connections".

3.Click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.

4. Download HijackThis and save it on your desktop. Some malicious programs are able to block HijackThis so when you click the download link, in the Save dialog rename HijackThis.exe to iexplorer.exe and only then click the Save button. After saving the file on your desktop, double click it. In the main HijackThis window click “Do a system scan only” button. Select these entries (place a tick at the left of the entry):

O4 - HKCU\..\Run: [Inspector] %AppData%\Protector-hox.exe

After selecting required entries, click "Fix Checked". After this procedure you can close HijackThis and proceed to the next removal step.

5. Download a legitimate anti-spyware software to fully remove Windows Smart Warden from your computer.

remover for Windows Smart Warden

6. After removing Windows Smart Warden reset your Hosts files. Don't skip this step, this malware modifies your Hosts files, and you will encounter browser redirect problems.

Hosts file is used to resolve some canonical names of websites to ip addresses. When it is changed, the user may be redirected to malicious site still seeing good URL in address bar. It is very hard to find out if the site is genuine or not, when hosts file is modified. To fix this, please download Microsoft FixIt tool, that restores your hosts file to windows default. Run this tool when downloaded and follow the on-screen instructions. Download link below:

Other tools known to remove Windows Smart Warden:

Additional information:

Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.

If you can't access Internet:

Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.

Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.

After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program. Then run a full system scan.

If you are unable to remove Windows Smart Warden, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

End these Windows Smart Warden processes:

random.exe
Protector-nbi.exe

Remove these Windows Smart Warden registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run!Inspector

Delete these Windows Smart Warden files:

%appdata%\npswf32.dll
%appdata%\Inspector-[rnd].exe
%desktopdir%\Windows Smart Warden.lnk
%commonprograms%\Windows Smart Warden.lnk

General tips on removing Windows Smart Warden:

*If you can't download anti-spyware software: Click on the download link, when the save dialog opens change the file name (example: when downloading mbam-setup.exe rename it to iexplore.exe).
*If you have installed anti-spyware program but you can't run it: Click Run, type %ProgramFiles% and press Enter. Open folder of your anti-spyware program, search for executable file and rename it. (example: Open Malwarebytes’ Anti-Malware folder, right-click on the main executable file (mbam.exe) then click rename. Rename the mbam.exe file to iexplore.exe, winlogon.exe firefox.exe ...
*If you can't access your anti-spyware software, try creating a new user account:
Click Start -> Settings -> Control panel.
Click User Accounts and create a new account.
Reboot your computer and login using a newly created user account.
*After this procedure you should be able to access your anti-spyware programs. Update and run a full system scan.