Smart Fortress 2012 Description

[+] Click Image to Enlarge

• 
• 
• 
• 
• 
• 
• 
• 

Smart Fortress 2012 is a fake anti-spyware scanner and a component of a huge family of rogue security applications. These kinds of fake security programs are designed to display messages claiming that the victim’s computer system is infected in an attempt to convince inexperienced computer users to purchase a useless ‘full version’ of Smart Fortress 2012. Since Smart Fortress 2012 has absolutely no way of detecting or removing malware, ESG security researchers strongly advise against taking any of Smart Fortress 2012’s claims seriously. ESG malware analysts recommend using a reliable anti-malware application to kick Smart Fortress 2012 out of your computer system. There are various clones of Smart Fortress 2012, including programs like Smart Protection 2012 and Security Sphere 2012.

Why You Should Not Trust Smart Fortress 2012’s Supposed Security

Smart Fortress 2012 uses an interface that rips off Windows Security Center in an attempt to convince its victims that Smart Fortress 2012 is a legitimate security application. It uses a fake system scan and a number of authentic-looking error messages in order to convince its victims of an imaginary infection on their PC. In fact, the real threat to your computer’s security is Smart Fortress 2012 itself. This application is designed to attempt to disable any security software on the infected computer as well as interfering with your web browser and with your files. Smart Fortress 2012’s family of rogue security scanners can force your web browser to visit malicious websites, often websites containing pornographic content, attack websites designed to infect your computer with further malware or websites related to Smart Fortress 2012. Smart Fortress 2012 and its clones can also hide your files, making it appear as if they have been deleted or block you access to your applications, displaying an error message claiming that Smart Fortress 2012 does so for ‘your own security’.

Dealing with a Smart Fortress 2012 Infection

Smart Fortress 2012 has been known to block security software. Smart Fortress 2012 has also been known to block access to the Terminal, the Registry Editor, System Restore and the Task Manager, all vital Windows components when it comes to dealing with security threats. Because of this, it is important to start up your computer system in Safe Mode to prevent Smart Fortress 2012 from loading automatically. It is also important to ensure that your security software is fully updated so that it will detect Smart Fortress 2012 as a hostile presence on your computer system.

Type: Rogue AntiSpyware Programs

How Can You Detect Smart Fortress 2012?

Smart Fortress 2012 Technical Report

As new Smart Fortress 2012 details are reported by our customers and findings from our Threat Research Center, we will update this section.

Fake message for Smart Fortress 2012:

The following fake error message(s) appears for Smart Fortress 2012:

Security Monitor: WARNING!
Attention! System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. Your private information and PC safety is at risk.
To get rid of unwanted spyware and keep your computer safe you need to update your current security software.
Click Yes to download official intrusion detection system (IDS software).

Warning!
Application cannot be executed. The file notepad.exe is infected.
Please activate your antivirus software.

Warning: Your computer is infected
Detected spyware infection!
Click this message to install the last update of security software…

Smart Fortress 2012 Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC.
Click here to remove them immediately with Smart Fortress 2012

‘How Smart Fortress 2012 Infects Your Computer’ Video

Smart Fortress 2012 Removal Details

Smart Fortress 2012 has typically the following processes in memory:

• %UserProfile%\Application Data\[RANDOM DIGITS]\[RANDOM DIGITS].exe
• %CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS].exe

Smart Fortress 2012 creates the following files in the system:

• %CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS]
• %CommonAppData%\[RANDOM 33 CHARACTERS]

Smart Fortress 2012 creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “[RANDOM]”
• HKEY_USERS\S-1-5-21-861567501-152049171-1708537768-1003_Classes\%s “(Default)” = “[RANDOM 4 CHARACTERS]”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “[RANDOM DIGITS].exe”
• HKEY_CURRENT_USER\Software\Classes\[RANDOM 4 CHARACTERS]
• HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}
• HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = “[RANDOM 4 CHARACTERS]“
• HKEY_CURRENT_USER\Software\Classes\[RANDOM 4 CHARACTERS]\shell\open\command “(Default)” = “%CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS].exe” -s “%1″ %*
• HKEY_CLASSES_ROOT\[RANDOM 4 CHARACTERS]
• HKEY_USERS\S-1-5-21-861567501-152049171-1708537768-1003_Classes\[RANDOM 4 CHARACTERS]\shell\open\command “(Default)” = “%CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS].exe” -s “%1″ %*

Important Article Disclaimer