Internet Security 2012

Internet Security 2012 Description

Type: Adware

ScreenshotInternet Security 2012 is a fake antispyware program that is installed by way of a Trojan infection. According to ESG PC security researchers, Internet Security 2012 has no way of providing security while going online or in any other situation. Internet Security 2012 is also just as useless as previous versions of this fake security program, which go as far back as 2010 (that is, Internet Security 2010 and Internet Security 2011). This is because Internet Security 2012 is part of a common computer scam designed to convince inexperienced computer users to purchase a useless security program. Internet Security 2012 does this by detecting nonexistent malware infections on the victim's computer and constantly prompting the victim to 'register' Internet Security 2012 in order to fix these problems. Of course, this so-called registration requires a credit card payment, which puts the victim at risk for identity theft and credit card fraud, apart from the money that the victim loses from paying for this useless application.

Internet Security 2012 is a carbon copy of previously reported bogus anti-spyware program from the FakeRean such as Windows Antivirus 2008, Vista Antivirus 2008, Antivirus Pro 2009, AntiSpy Safeguard, ThinkPoint, Spyware Protection 2010, Internet Antivirus 2011, Palladium Pro, XP Anti-Virus 2011, CleanThis, PC Clean Pro, XP Home Security 2012, Windows Clear Problems, XP Security 2012, Antivirus PRO 2015. ESG malware analysts recommend removing Internet Security 2012 immediately with the help of a legitimate anti-malware application. The presence of this fake security program on your computer is a definitive sign that your computer has become infected with a dangerous Trojan.

How Criminals Use Internet Security 2012 to Attempt to Steal Your Money

Internet Security 2012 is part of a scam that is older than the Internet itself. It is a version of a common scam that auto mechanics and repairmen, for example, would use in order to take advantage of people with little experience with cars or appliances. Basically, the repairman or mechanic would deliberately cause a problem with the client's car or appliance and then attempt to charge the victim in order to fix it. Internet Security 2012 works in the same way, causing the victim's computer to display common symptoms associated with malware so that the victim will be convinced to purchase a useless registration code for Internet Security 2012. Some common problems that derive from an Internet Security 2012 infection may include general system stability and performance problems, and a drastic slow-down of the infected computer system. The main symptom of an Internet Security 2012 infection is the presence of constant, non-stop error messages and security alerts claiming that the victim's computer is severely infected and recommending the full version of Internet Security 2012 as a possible cure.ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

Technical Information

Screenshots & Other Imagery

Internet Security 2012 Video

Tip: Turn your sound ON and watch the video in Full Screen mode.

File System Details

Internet Security 2012 creates the following file(s):
# File Name Detection Count
1 %Documents and Settings%\All Users\Application Data\[RANDOM]\Internet Security 2012.exe N/A
2 %AppData%\isecurity.exe N/A
3 %Documents and Settings%\All Users\Application Data\[RANDOM]\defender.exe N/A
4 %Documents and Settings%\[UserName]\Application Data\1tmp.bat N/A
5 %ProgramFiles%\Internet Security 2012\Internet Security 2012.exe N/A
6 %Documents and Settings%\All Users\Application Data\[RANDOM]\[RANDOM].exe N/A
7 %TEMP%\winupd.exe N/A
8 %Documents and Settings%\[UserName]\asr.dat N/A
9 %CommonPrograms%\Internet Security 2012\Internet Security 2012.lnk N/A
10 %WINDOWS%\Prefetch\ISECURITY.EXE-1824C86D.pf N/A
11 %UserProfile%\.Internet Security 2012 N/A

Registry Details

Internet Security 2012 creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\[RANDOM]
HKEY_CLASSES_ROOT\BrcWizApp.BrcWiz.1
HKEY_CLASSES_ROOT\Interface\{4B66E1DF-4DE3-4CDA-83B5-11673EADAB0B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%UserProfile%\Application Data\Internet Security 2012.exe" /sn"
HLEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[RANDOM]"
HKEY_CLASSES_ROOT\BrcWizApp.BrcWiz
HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{80c10400-59cb-4c79-97ce-cc693103afca}
HKEY_CURRENT_USER\Software\Microsoft "adver_id" = "29"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ISECURITY.EXE"
HKEY_LOCAL_MACHINE\Software\Internet Security 2012.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Internet Security 2012"
HKEY_CLASSES_ROOT\CLSID\{80c10400-59cb-4c79-97ce-cc693103afca}
HKEY_CLASSES_ROOT\TypeLib\{58B4E0F5-F122-4C02-B038-C482D998486A}
HKEY_CURRENT_USER\Software\Internet Security 2012
HKEY_LOCAL_MACHINE\SOFTWARE\ISECURITY.EXE

More Details on Internet Security 2012

The following messages associated with Internet Security 2012 were found:
Explorer.exe can not start
File Explorer.exe is infected by
W32/Blaster.worm
Please activate Internet Security 2012 to protect your Computer.

Related Posts

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

One Comment