Smart Fortress 2012

Threat Scorecard

Ranking: 14,316
Threat Level: 100 % (High)
Infected Computers: 383
First Seen: February 28, 2012
Last Seen: July 12, 2023
OS(es) Affected: Windows

Smart Fortress 2012 Image

Smart Fortress 2012 is a fake anti-spyware scanner and a component of a huge family of rogue security applications called WinWeb Security. These kinds of fake security programs are designed to display messages claiming that the victim's computer system is infected in an attempt to convince inexperienced computer users to purchase a useless 'full version' of Smart Fortress 2012. Since Smart Fortress 2012 has absolutely no way of detecting or removing malware, ESG security researchers strongly advise against taking any of Smart Fortress 2012's claims seriously. ESG malware analysts recommend using a reliable anti-malware application to kick Smart Fortress 2012 out of your computer system.

There are various clones of Smart Fortress 2012, including programs like System Security, Antivirus Security, Total Security 2009, Security Tool, Trojan.RogueAV.a.gen, System Adware Scanner 2010, FakeAlert-KW.e, Advanced Security Tool 2010, System Tool 2011, Security Shield, MS Removal Tool, Total Security, System Security 2011, Essential Cleaner, Security Shield Pro 2011, Personal Shield Pro, Security Shield 2011, Security Sphere 2012, Advanced PC Shield 2012, Futurro Antivirus.

Why You Should Not Trust Smart Fortress 2012’s Supposed Security

Smart Fortress 2012 uses an interface that rips off Windows Security Center in an attempt to convince its victims that Smart Fortress 2012 is a legitimate security application. It uses a fake system scan and a number of authentic-looking error messages in order to convince its victims of an imaginary infection on their PC. In fact, the real threat to your computer's security is Smart Fortress 2012 itself. This application is designed to attempt to disable any security software on the infected computer as well as interfering with your web browser and with your files. Smart Fortress 2012's family of rogue security scanners can force your web browser to visit malicious websites, often websites containing pornographic content, attack websites designed to infect your computer with further malware or websites related to Smart Fortress 2012. Smart Fortress 2012 and its clones can also hide your files, making it appear as if they have been deleted or block you access to your applications, displaying an error message claiming that Smart Fortress 2012 does so for 'your own security'.

Dealing with a Smart Fortress 2012 Infection

Smart Fortress 2012 has been known to block security software. Smart Fortress 2012 has also been known to block access to the Terminal, the Registry Editor, System Restore and the Task Manager, all vital Windows components when it comes to dealing with security threats. Because of this, it is important to start up your computer system in Safe Mode to prevent Smart Fortress 2012 from loading automatically. It is also important to ensure that your security software is fully updated so that it will detect Smart Fortress 2012 as a hostile presence on your computer system.ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

SpyHunter Detects & Remove Smart Fortress 2012

Smart Fortress 2012 Video

Tip: Turn your sound ON and watch the video in Full Screen mode.

File System Details

Smart Fortress 2012 may create the following file(s):
# File Name MD5 Detections
1. %UserProfile%\Application Data\[RANDOM DIGITS]\[RANDOM DIGITS].exe
2. %CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS].exe
3. %CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS]
4. %CommonAppData%\[RANDOM 33 CHARACTERS]
5. F4D55F3B000083BB000405A5D151FC4E.exe 6379eba67e654d595ec2aeeb7c9c87be 0

Registry Details

Smart Fortress 2012 may create the following registry entry or registry entries:
File name without path
Smart Fortress 2012.lnk
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[RANDOM]"
HKEY_USERS\S-1-5-21-861567501-152049171-1708537768-1003_Classes\%s "(Default)" = "[RANDOM 4 CHARACTERS]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[RANDOM DIGITS].exe"
HKEY_CURRENT_USER\Software\Classes\[RANDOM 4 CHARACTERS]
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = "[RANDOM 4 CHARACTERS]"
HKEY_CURRENT_USER\Software\Classes\[RANDOM 4 CHARACTERS]\shell\open\command "(Default)" = "%CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS].exe" -s "%1" %*
HKEY_CLASSES_ROOT\[RANDOM 4 CHARACTERS]
HKEY_USERS\S-1-5-21-861567501-152049171-1708537768-1003_Classes\[RANDOM 4 CHARACTERS]\shell\open\command "(Default)" = "%CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS].exe" -s "%1" %*

Directories

Smart Fortress 2012 may create the following directory or directories:

%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Smart Fortress 2012
%APPDATA%\Microsoft\Windows\Start Menu\Programs\Smart Fortress 2012

Messages

The following messages associated with Smart Fortress 2012 were found:

Security Monitor: WARNING!
Attention! System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. Your private information and PC safety is at risk.
To get rid of unwanted spyware and keep your computer safe you need to update your current security software.
Click Yes to download official intrusion detection system (IDS software).
Smart Fortress 2012 Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC.
Click here to remove them immediately with Smart Fortress 2012
Warning!
Application cannot be executed. The file notepad.exe is infected.
Please activate your antivirus software.
Warning: Your computer is infected
Detected spyware infection!
Click this message to install the last update of security software...

1 Comment

Thank you for providing this resource online.

Trending

Most Viewed

Loading...