If you are seeing a fake alert from S.M.A.R.T Check or S.M.A.R.T Repair then you’re probably reading this article so you can understand how to get rid of it.Thankfully we’ve got the instructions to help you get rid of this virus.
First off all , you should know that , S.M.A.R.T Check and S.M.A.R.T Repair are both fake components of Data Recovery or Smart HDD malicious software, this infections will display fake alerts, claiming that several hard drive errors were detected on your computer.In reality, none of the reported issues are real, and are only used to scare you into buying S.M.A.R.T virus and stealing your personal financial information.
The infections has changed your desktop background to a black scren, has hidden your files and shortcuts and it’s causing browsing redirects.
If you’ve got a S.M.A.R.T virus infection , you’ll be seeing this screens :
![S.M.A.R.T Check [Image: Smart Check.png]](http://malwaretips.com/blogs/wp-content/uploads/2012/05/Data-Recovery-Rogue.png)
![S.M.A.R.T Repair [Image: Smart Repair.png]](http://malwaretips.com/blogs/wp-content/uploads/2012/05/Data-Recovery-fake-alert.png)
![S.M.A.R.T Alert [Image: Smart alert.png]](http://malwaretips.com/blogs/wp-content/uploads/2012/05/Data-Recovery-Rogue-alert.png)
Registration codes for S.M.A.R.T virus
As an optional step,you can use the following license key to register S.M.A.R.T virus and stop the fake alerts.
Data Recovery Rogue: 08869246386344953972969146034087
SMART HDD Rogue: 15801587234612645205224631045976
Please keep in mind that entering the above registration code will NOT remove S.M.A.R.T virus from your computer , instead it will just stop the fake alerts so that you’ll be able to complete our removal guide more easily.
Removal guide for S.M.A.R.T virus
STEP 1 : Start your computer in Safe Mode with Networking
- Remove all floppy disks, CDs, and DVDs from your computer, and then restart your computer.
- Press and hold the F8 key as your computer restarts.Please keep in mind that you need to press the F8 key before the Windows start-up logo appears.
- On the Advanced Boot Options screen, use the arrow keys to highlight Safe Mode with Networking , and then press ENTER.
![Safe Mode with Networking screen [Image: Safemode.jpg]](//malwaretips.com/images/removalguide/safemode.jpg)
- Log on to your computer with a user account that has administrator rights
STEP 2: Remove S.M.A.R.T virus malicious proxy server
S.M.A.R.T virus may add a proxy server which prevents the user from accessing the internet,follow the below instructions to remove the proxy.
- Start Internet Explorer
and if you are using Internet Explorer 9 ,click on the gear icon
(Tools for Internet Explorer 8 users) ,then select Internet Options.
![Internet Options in IE [Image: Internet-options-IE.png]](//malwaretips.com/images/removalguide/ie1.png)
- Go to the tab Connections.At the bottom, click on LAN settings.
![Connections tab in Internet Explorer [Image: Remove-proxy-server2.png]](//malwaretips.com/images/removalguide/ie2.png)
- Uncheck the option Use a proxy server for your LAN. This should remove the malicious proxy server and allow you to use the internet again.
![Uncheck the option Use a proxy server for your LAN [Image: Remove-proxy-server3.png]](//malwaretips.com/images/removalguide/ie3.png)
If you are a Firefox users, go to Firefox(upper left corner) → Options → Advanced tab → Network → Settings → Select No Proxy
STEP 3: Run RKill to terminate known malware processes associated with S.M.A.R.T virus.
RKill is a program that attempts to terminate any malicious processes associated with S.M.A.R.T virus ,so that your normal security software can then run and clean your computer of infections.
As RKill only terminates a program’s running process, and does not delete any files, after running it you should not reboot your computer as any malware processes that are configured to start automatically will just be started again.
- While your computer is in Safe Mode with Networking ,please download the latest official version of RKill.

- Double-click on the RKill iconin order to automatically attempt to stop any processes associated with S.M.A.R.T virus.
![RKILL ICON [Image: run-rkill-1.png]](//malwaretips.com/images/removalguide/rkill1.png)
- RKill will now start working in the background, please be patient while the program looks for various malware programs and tries to terminate them.
![RKILL Command prompt [Image: run-rkill-2.png]](//malwaretips.com/images/removalguide/rkill2.png)
IF you receive a message that RKill is an infection, that is a fake warning given by the rogue. As a possible solution we advise you to leave the warning on the screen and then try to run RKill again.Run RKill until the fake program is not visible but not more than ten times.
IF you continue having problems running RKill, you can download the other renamed versions of RKill from here. - When Rkill has completed its task, it will generate a log. You can then proceed with the rest of the guide.
![RKILL LOG [Image: S.M.A.R.T virus rkill3.jpg]](//malwaretips.com/images/removalguide/rkill3.png)
WARNING: Do not reboot your computer after running RKill as the malware process will start again , preventing you from properly performing the next step.
STEP 4: Remove S.M.A.R.T virus malicious files with Malwarebytes Anti-Malware FREE
- Please download the latest official version of Malwarebytes Anti-Malware FREE.

- Install Malwarebytes’ Anti-Malware by double clicking on mbam-setup.
![Malwarebytes Anti-Malware Installer [Image: malwarebytes-installer.png]](//malwaretips.com/images/removalguide/mbam1.png)
- When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware checked. Then click on the Finishbutton. If Malwarebytes’ prompts you to reboot, please do not do so.
![Install Malwarebytes Anti-Malware [Image: install-malwarebytes.png]](//malwaretips.com/images/removalguide/mbam2.png)
- Malwarebytes Anti-Malware will now start and you’ll be prompted to start a trial period , please select ‘Decline‘ as we just want to use the on-demand scanner.
- On the Scanner tab,please select Perform full scan and then click on the Scan button to start scanning your computer for any possible infections.
![Perform a Full System Scan [Image: malwarebytes-full-system-scan.png]](//malwaretips.com/images/removalguide/mbam4.png)
- Malwarebytes’ Anti-Malware will now start scanning your computer for S.M.A.R.T virus malicious files as shown below.
![Malwarebytes Anti-Malware scanning for S.M.A.R.T virus [Image: malwarebytes-scanning.png]](//malwaretips.com/images/removalguide/mbam5.png)
- When the scan is finished a message box will appear, click OK to continue.
![Malwarebytes when the scan is finished [Image: malwarebytes-scan-finish.png]](//malwaretips.com/images/removalguide/mbam9.png)
- You will now be presented with a screen showing you the malware infections that Malwarebytes’ Anti-Malware has detected.Please note that the infections found may be different than what is shown in the image.Make sure that everything is Checked (ticked) and click on the Remove Selected button.
![S.M.A.R.T virus infection scan results [Image: malwarebytes-scan-results.png]](//malwaretips.com/images/removalguide/mbam6.png)
- Malwarebytes’ Anti-Malware will now start removing the malicious files.If during the removal process Malwarebytes will display a message stating that it needs to reboot, please allow this request.
![Reboot prompt from Malwarebytes [Image: malwarebytes-reboot-prompt.png]](//malwaretips.com/images/removalguide/mbam10.png)
STEP 5: Double check your system for any left over infections with HitmanPro
- This step can be performed in Normal Mode ,so please download the latest official version of HitmanPro.
![Download HitmanPRO [Image: Download Hitman Pro]](//malwaretips.com/images/removalguide/downloadnow.gif)
- Double click on the previously downloaded file to start the HitmanPro installation.
![HitmanPro Installer [Image: hitmanpro-icon.png]](//malwaretips.com/images/removalguide/hpro1.png)
NOTE : If you have problems starting HitmanPro, use the “Force Breach” mode. Hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including the malware process. (How to start HitmanPro in Force Breach mode – Video) - Click on Next to install HitmanPro on your system.
![HitmanPro installation process [Image: installing-hitmanpro.png]](//malwaretips.com/images/removalguide/hpro2.png)
- The setup screen is displayed, from which you can decide whether you wish to install HitmanPro on your machine or just perform a one-time scan, select a option then click on Next to start a system scan.
![HitmanPro setup options [Image: hitmanpro-setup-options.png]](//malwaretips.com/images/removalguide/hpro3.png)
- HitmanPro will start scanning your system for malicious files. Depending on the size of your hard drive, and the performance of your computer, this step will take several minutes.
![HitmanPro scanning for S.M.A.R.T virus [Image: hitmanpro-scanning.png]](//malwaretips.com/images/removalguide/hpro4.png)
- Once the scan is complete,a screen displaying all the malicious files that the program found will be shown as seen in the image below.After reviewing each malicious object click Next.
![HitmanPro S.M.A.R.T virus scan results [Image: hitmanpro-scan-results.png]](//malwaretips.com/blogs/wp-content/uploads/2012/02/rsz_hpro5.png)
- Click Activate free license to start the free 30 days trial and remove the malicious files.
![Activate HitmanPro free license to remove detected infections [Image: hitmanpro-activation.png]](//malwaretips.com/images/removalguide/hpro6.png)
- HitmanPro will now start removing the infected objects, and in some instances, may suggest a reboot in order to completely remove the malware from your system. In this scenario, always confirm the reboot action to be on the safe side.
STEP 6: Unhide your files and folders
S.M.A.R.T virus modifies your file system in such a way that all files and folders become hidden, to restore the default settings , you’ll need to run the below program.
- Download Unhide.exe, to unhide your files and folders.

- Double-click on the Unhide.exe icon on your desktop and allow the program to run.The whole process should not take more than 5 minutes to complete,and at the end this utility will generate a report.

STEP 7 : Restore your shortcuts and remove any left over malicious registry keys
S.M.A.R.T virus has moved your shortcuts files in the Temporary Internet folder and added some malicious registry keys to your Windows installation , to restore your files we will need to perform a scan with RogueKiller.
- Please download the latest official version of RogueKiller.

- Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Start button to perform a system scan.
![Click on the Start button to perform a system scan [Image: roguekiller-1.png]](//malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-1.png)
- After the scan has completed, press the Delete button to remove any malicious registry keys.
![Press Delete to remove the malicious registry keys [Image: roguekiller-2.png]](//malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-2.png)
- Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.
![Click on the Start button to perform a system scan [Image: roguekiller-1.png]](//malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-3.png)
STEP 8: Get your desktop look back!
S.M.A.R.T virus changes your desktop background to a solid black color,to change it back to default one follow the below instruction.
- Windows XP : Click on the Start button and then select Control Panel. When the Control Panel opens, please click on the Display icon. From this screen you can now change your Theme and desktop background.
- Windows 7 and Vista : Click on the Start button and then select Control Panel. When the Control Panel opens, please click on the Appearance and Personalization category. Then select Change the Theme or Change Desktop Background to revert back to your original Theme and colors.
If you are still experiencing problems while trying to remove Smart HDD from your machine, please start a new thread in our Malware Removal Assistance forum.
What’s next? Join our amazing community and build up your malware defenses !
![Safe Mode with Networking screen [Image: Safemode.jpg]](http://malwaretips.com/images/removalguide/safemode.jpg)
![Internet Options in IE [Image: Internet-options-IE.png]](http://malwaretips.com/images/removalguide/ie1.png)
![Connections tab in Internet Explorer [Image: Remove-proxy-server2.png]](http://malwaretips.com/images/removalguide/ie2.png)
![Uncheck the option Use a proxy server for your LAN [Image: Remove-proxy-server3.png]](http://malwaretips.com/images/removalguide/ie3.png)

![RKILL ICON [Image: run-rkill-1.png]](http://malwaretips.com/images/removalguide/rkill1.png)
![RKILL Command prompt [Image: run-rkill-2.png]](http://malwaretips.com/images/removalguide/rkill2.png)
![RKILL LOG [Image: S.M.A.R.T virus rkill3.jpg]](http://malwaretips.com/images/removalguide/rkill3.png)
![Malwarebytes Anti-Malware Installer [Image: malwarebytes-installer.png]](http://malwaretips.com/images/removalguide/mbam1.png)
![Install Malwarebytes Anti-Malware [Image: install-malwarebytes.png]](http://malwaretips.com/images/removalguide/mbam2.png)
![Perform a Full System Scan [Image: malwarebytes-full-system-scan.png]](http://malwaretips.com/images/removalguide/mbam4.png)
![Malwarebytes Anti-Malware scanning for S.M.A.R.T virus [Image: malwarebytes-scanning.png]](http://malwaretips.com/images/removalguide/mbam5.png)
![Malwarebytes when the scan is finished [Image: malwarebytes-scan-finish.png]](http://malwaretips.com/images/removalguide/mbam9.png)
![S.M.A.R.T virus infection scan results [Image: malwarebytes-scan-results.png]](http://malwaretips.com/images/removalguide/mbam6.png)
![Reboot prompt from Malwarebytes [Image: malwarebytes-reboot-prompt.png]](http://malwaretips.com/images/removalguide/mbam10.png)
![HitmanPro Installer [Image: hitmanpro-icon.png]](http://malwaretips.com/images/removalguide/hpro1.png)
![HitmanPro installation process [Image: installing-hitmanpro.png]](http://malwaretips.com/images/removalguide/hpro2.png)
![HitmanPro setup options [Image: hitmanpro-setup-options.png]](http://malwaretips.com/images/removalguide/hpro3.png)
![HitmanPro scanning for S.M.A.R.T virus [Image: hitmanpro-scanning.png]](http://malwaretips.com/images/removalguide/hpro4.png)
![HitmanPro S.M.A.R.T virus scan results [Image: hitmanpro-scan-results.png]](http://malwaretips.com/blogs/wp-content/uploads/2012/02/rsz_hpro5.png)
![Activate HitmanPro free license to remove detected infections [Image: hitmanpro-activation.png]](http://malwaretips.com/images/removalguide/hpro6.png)

![Click on the Start button to perform a system scan [Image: roguekiller-1.png]](http://malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-1.png)
![Press Delete to remove the malicious registry keys [Image: roguekiller-2.png]](http://malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-2.png)
![Click on the Start button to perform a system scan [Image: roguekiller-1.png]](http://malwaretips.com/blogs/wp-content/uploads/2012/04/roguek-3.png)
Hi, I can’t download the RKill program!! Any suggestions please? Thanks so much
Hello Joanne,
Try this :
Option 1 : Try to download a different named Rkill (direct download links bellow):
http://download.bleepingcomputer.com/grinler/WiNlOgOn.exe
http://download.bleepingcomputer.com/grinler/uSeRiNiT.exe
http://download.bleepingcomputer.com/grinler/rkill.scr
And then follow the guide starting with the Malwarebytes scan.
If that doesn’t work please try to do this:
Option 2: Download HitmanPro and then start this program in ForceBreach Mode
1.Here are the direct download links for HitmanPro,
– http://dl.surfright.nl/HitmanPro36.exe (For 32bit)
– http://dl.surfright.nl/HitmanPro36_x64.exe (For 64bit)
2.Hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including this rogue malicious process
Here is a video that explains with graphic details how to do this : http://www.youtube.com/watch?v=m6eRWTv2STk
3. If it start ,let it scan and remove all the detected threats , then perform a scan with Malwarebytes.
Next , perform a system scan with Emsisoft Anti-Malware:
Make sure that everything is Checked (ticked) and click on the ‘Quarantine selected objects’ button.
If during the removal process Emsisoft will display a message stating that it needs to reboot, please allow this request.
If you are still experiencing problems , start a thread in our Malware Removal Support forum : http://malwaretips.com/Forum-Help-my-PC-is-infected
Thank you so much, you will never know how truely in debt I am to you. You are a credit to society for helping the likes of me. I am so thankful to your blog x
Thankyou very much, most of your S.M.A.R.T. repair process was great. This type of post is greatly appreciated and I plan to purchase the products you have directed me to.
Everything is now OK, except my active desktop. My desktop is blank despite moving the files to the correct folder, and it is impossible to right click in the desktop, right clicking does nothing.
Plese run Unhide.exe
Then perform a scan with Emsisoft Anti-Malware :
Make sure that everything is Checked (ticked) and click on the ‘Quarantine selected objects’ button.
Running Win XP in safe mode, proxy server box was NOT checked, stumped at RKill. Download box opens and it appears to download, but then nothing. No icon, no “run” window, nothing. If it’s there, I can’t find it.
Hitman pro appears to download, the big green window comes up, but nothing at the bottom of the page. No “Next” button—no buttons at all.
Malware bytes downloads and proceeds all the way to the point of set-up, then a SET UP box appears w big red X button that says “Access Denied”.
Any ideas?
Ok,try to do this…
STEP 1 : While in NORMAL MODE,download HitmanPro and then start this program in ForceBreach Mode
1.Here are the direct download links for HitmanPro,
– http://dl.surfright.nl/HitmanPro36.exe (For 32bit)
– http://dl.surfright.nl/HitmanPro36_x64.exe (For 64bit)
2.Hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including this rogue malicious process
Here is a video that explains with graphic details how to do this : http://www.youtube.com/watch?v=m6eRWTv2STk
3. If it start ,let it scan and remove all the detected threats , then perform a scan with Malwarebytes.
STEP 2: Download/Run Rkill and then run a scan with Malwarebytes.
1.Download a different named Rkill (direct download links bellow):
http://download.bleepingcomputer.com/grinler/WiNlOgOn.exe
http://download.bleepingcomputer.com/grinler/uSeRiNiT.exe
http://download.bleepingcomputer.com/grinler/rkill.scr
2.And then follow the guide starting with the Malwarebytes scan.
STEP3 : Perform a system scan with Emsisoft Anti-Malware:
Make sure that everything is Checked (ticked) and click on the ‘Quarantine selected objects’ button.
If during the removal process Emsisoft will display a message stating that it needs to reboot, please allow this request.
If you are still experiencing problems , start a thread in our Malware Removal Support forum : http://malwaretips.com/Forum-Malware-Removal-Assistance
Starting up in normal mode the S.M.A.R.T. virus had me locked out of all programs and no access to internet. In desperation I tried the license key AND IT WORKED! I got access to programs & access to internet. Still had one annyoing “Alert” window that kept poping back up every 5 seconds or so, but was able to work around that and download & run Hitman Pro, and then also RKill, Maleware Bytes, and Rogue Killer. Unsucessful with Emsisoft, though. It was taking hours and hours to download, until finally I just gave up. Right now everything works (I think), the desktop is back, and the icons are back.
Seems to be sluggish though. I see that Hitman Pro auto-starts at startup, but it only takes 3-4 minutes and then it’s done. Maybe some of the other anti-maleware programs are slowing me down?
Should I leave them all installed, or maybe get rid of some of them?
Should I turn off Hitman Pro and just run it periodically?
Thank you soooooo much for your expert assistance! You are a Gentleman and a Scholar, and I will be always in your debt.
You can stop HitmanPro from running at startup as it isn’t need it…..And if you want you can uninstall any software that, you had to install(malwarebytes,hitmanpro etc..)
Additionally ,you can perform a scan with ESET Online Scanner
Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Also it would be a very good idea to register on our forums and start a thread in our Security Configuration Wizard forum to build up your PC protection.
Thanks SO MUCH for the detailed info.
thank u so much i successfully removed it.. but i didn’t know how i get infected in the first place..
any thoughts on how to avoid get infected by this smart faggot again?
Hello Hans,
Read this article: http://malwaretips.com/blogs/how-to-easily-avoid-pc-infections/
And start a thread in our Security Configuration Wizard forum : http://malwaretips.com/Forum-Security-Configuration-Wizard
Stay safe!
Thank you sooo much! I just got this laptop and it really scared me. I have one question though, there is an icon that says data recovery… should I delete it, or is it safe?
If you remove all the infected objects found by Malwarebytes and the other software then yes, you can (and should) delete the left over shortcut on the desktop!
Stay safe!
I picked up SMART from Amazon’s website this morning when I clicked add to cart!
Believe SMART is gone but I still have an icon tray item on left. Since all this removal starts in safe mode, can you indicate somewhere in your instructions when to reboot to normal mode before recovering desktop icons, background, etc.
Thank you so much for your help!
I looked at properties for icon, found folder name, folder was gone but files named same as folder that were executable still remained. Deleted those 3 files and the taskbar and desktop icon.
Thanks again.
Hi!
I am following your instructions to remove this virus however I am stuck. After starting the computer in Safe Mode I can not find Internet Explorer to continue. It’s not on my Start menu nor on the task bars. How do I get there?
Thanks!
Hello Deb, please follow this steps to start Internet Explorer:
@echo offSTART /max iexplore.exe
Do not have the Notepad file when I do that. I have the following:
Bitmap image
Contact
Microsoft Office Work Document
Journal Document
Microsoft Office PowerPoint Presentation
Text Document
Microsoft Office Excel Worksheet
Compressend Folder
Briefcase
Any suggestions? Thanks!
Use the ‘Text Document’ option…. Make sure to save it as a .bat file (this is very important!)
It worked! Thank you!
Thank you so much for your help! It looks like I have removed the virus.
another way to do this is right click on the task bar, and select “task manager”, then select “new task” button, then type “iexplore.exe”, this will bring up internet explorer.
A few of the computers at my company got infected. Pretty much all of my data appears to be missing. Upon completion of the removal, will the data return? In other words, will I be able to make a full recovery?
Yes , just follow the guide..If you need help, just ask here!
Good luck!
I……. I love you….. Thats it. you have saved my life and now I love you.
Thanks a lot. I very much appreciate your help.
Thank you very much for you help! I still have problems with usb flash memory devices and with external usb hard disks, because the computer doesn´t recognise them, although the usb port permits to connect mouse or printers even if I boot from a usb flash memory, but it doesn´t work with files stored in those devices. Can you suggest me something?
Thank you SOO freakin much……. I swear I’m going to name my first born after you…. It’ll take him a while to get use to since he’s already 11yrs old but I’m going to do it anway ;) this info saved my butt.. Thanks again
Thank you worked great……….
Great stuff. Works exactly as described. Thanks for the time, effort and expertise.
Thnx! Best post ever! I’ve tried everything and always had to pay! u rock!
I have the S.M.A.R.T. virus on my primary computer. I have not yet attempted to remove it out of fear of causing more damage. This virus embedded itself after I noticed that all of my search requests were being redirected to totally unrelated websites. (Google redirect virus) So now I not only have one problem, I have two. I am not a novice at computing but neither am I an expert. I am hoping that the steps you have outlined will remedy this issue otherwise I will have no other choice than to call Geek Squad or someone for assistance. How anyone could be so malicious as to conceive this type of virus is beyond me and believe that they should be identified and brought up on charges. Wish me luck.
Good luck.
If you need help just ask here or in our forums!:)
I got it and thought my Saturday and thought my laptop was gone.I followed these instructions and it’s back to normal.I didn’t need the last couple of tasks.
Hey, thanks alot! I tried everything with no luck, and then i found this great website. It took time to scan it but it was worth it. I still have something called Data Recovery on my pc, but i dont know if it matters?
Thank you anyway, i recommend this to everyone who got the same problem :)
I was able to do everything except I still cannot access my C:\Documents and Settings locations to move my saved pinned task bar items and other shortcuts back to their original location.
I CAN, however, get to all of my documents.
Lets try to run Unhide.exe and run it.