If you are infected with the tprdpw32.exe or SmartService rootkit, you will not be able to launch many security and anti-virus programs. The Tprdpw32 rootkit will be installed along with a Windows driver that prevents you from terminating various unwanted programs and does not allow you to start anti-virus programs to clean your computer. Essentially, this rootkit acts as a bodyguard for installed adware and Trojan infections.
When SmartService is installed, it will create two files located at C:\Windows\System32\tprdpw32.exe and C:\Windows\System32\drivers\ndistpr64.sys. When these files are executed, they will cause errors to be shown when you try and terminate certain processes or start a anti-malware programs.
For example, when you try and terminate a protected process, it will display an error stating that it is Unable To Terminate Process because is Access is denied.
If you try and run an anti-malware program, it will display an error stating that the Requested Resource is in Use as shown below.
How did the Tprdpw32 or SmartService Rootkit get on my computer?
This rootkit is bundled with an unwanted program called s5Mark, which is installed by free programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay close attention to license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you immediately cancel the install and not use the free software.
As you can see, the Smart Service rootkit purposely blocks you from terminating protected programs and from running your security programs. Thankfully, a method has been devised that will allow you to remove it. To remove this infection for free, please follow the guide below.
Your computer should now be free of the Tprdpw32.exe and SmartService Rootkit program. If your current security solution allowed this program on your computer, you may want to consider purchasing the full-featured version of Zemana AntiMalware to protect against these types of threats in the future.
If you are still having problems with your computer after completing these instructions, then please follow the steps outlined in the topic linked below:
Are Your Protected?
While Zemana AntiMalware, Malwarebytes Anti-Malware & HitmanPro will scan and clean a computer for free, the free versions do not offer real-time protection. If you want to be fully protected at all times then it is recommended that you purchase a premium version.
Zemana AntiMalware
Purchase the full-featured version of Zemana AntiMalware, which includes second opinion malware scanner when other solutions do not work, cloud scanning, and super-fast scan time, to protect yourself against these types of threats in the future!
Malwarebytes Anti-Malware
Purchase the full-featured version of Malwarebytes Anti-Malware, which includes real-time protection, scheduled scanning, and website filtering, to protect yourself against these types of threats in the future!
HitmanPro
Purchase the full-featured version of HitmanPro, which includes discover viruses, trojans, rootkits, spyware and other malware on up-to-date and fully protected computers using cloud protection and behavioral detections, to protect yourself against these types of threats in the future!
Disclaimer: While we do earn a commission from the sale of the above products, rest assured we only recommend them due to their effectiveness.