Security Monitor 2012

Security Monitor 2012 Description

ScreenshotSecurity Monitor 2012 is a fake security program affiliated with the WinWeb Security family. The rogue security programs belonging to this family are all cause by variants of the WinWeb Security Trojan infection. Security Monitor 2012 is not unique in the way Security Monitor 2012 infects a computer system. According to ESG security researchers, Security Monitor 2012 is practically identical in every way to previous iterations of WinWeb Security. As the year 2011 comes to a close, the criminals behind this harmful malware infection have started releasing a batch of clones of WinWeb Security with the number '2012' attached to the end, in order to make it appear as if they are new versions of legitimate security software. In fact, there is practically no difference between Security Monitor 2012 and the 2011 and 2010 editions of this rogue security program, except for the small interface changes to accommodate the change to its name. If Security Monitor 2012 is installed on your computer system, ESG security researchers strongly recommend starting your computer up in Safe Mode and using a legitimate anti-malware program to remove Security Monitor 2012 and all of its associated malware. Failure to remove Security Monitor 2012 in a timely manner can result in the theft of your credit card information, as well as further malware making its way into your computer system.

The Security Monitor 2012 scam is a typical version of the rogue security application scam. Most infections follow the same pattern in order to trick their victims into giving up their hard-earned cash. Usually, the Security Monitor 2012 scam follows the same steps:

  1. Security Monitor 2012 is first installed onto a computer system with the help of a dropper or downloader Trojan. These are malware infections designed to enter a computer system and install or download other Trojans. Examples of these kinds of malware include Zlob, Vundo and the Fake Microsoft Security Essentials Alert Trojan.
  2. Once installed, Security Monitor 2012 will display a large number of alerts claiming that the computer system is severely infected with a variety of malware. ESG malware analysts recommend that you disregard all of Security Monitor 2012's warnings. The real infection on your computer is Security Monitor 2012 itself.
  3. Security Monitor 2012 then offers to fix these nonexistent problems as long as you purchase a 'full version' of this useless program.

Among the numerous clones of Security Monitor 2012 are System Security, Total Security, Antivirus Security, Total Security 2009, Security Tool, Trojan.RogueAV.a.gen, System Adware Scanner 2010, FakeAlert-KW.e, Advanced Security Tool 2010, System Tool 2011, Security Shield, MS Removal Tool, Antivirus Center, Antivirus Center, Essential Cleaner, Security Shield Pro 2011, Personal Shield Pro, Security Shield 2011, Advanced PC Shield 2012, Security Sphere 2012.

Aliases: Adware/Zugo [Fortinet], Trojan.ADH, Riskware.Win32.Toolbar.Zugo.AMN!A2, Zugo Ltd (v) (not malicious), Trojan.PWS.Banker.62728 [DrWeb], a variant of Win32/Toolbar.Zugo [NOD32], Artemis!87811BBEF243 [McAfee], Dropper.Generic6.ACLT [AVG], W32/Jorik_IRCbot.ABH!tr [Fortinet], Trojan.Win32.Vilsel [Ikarus], a variant of Win32/Injector.TET, Trojan.Gen, Trojan/Win32.Jorik.gen [Antiy-AVL], Trojan/Jorik.fbrr and Trojan.Win32.Vilsel!IK.

Technical Information

Screenshots & Other Imagery

Tip: Turn your sound ON and watch the video in Full Screen mode to fully experience how Security Monitor 2012 infects a computer.

Security Monitor 2012 Video

Security Monitor 2012 Image 1 Security Monitor 2012 Image 2 Security Monitor 2012 Image 3 Security Monitor 2012 Image 4 Security Monitor 2012 Image 5 Security Monitor 2012 Image 6 Security Monitor 2012 Image 7 Security Monitor 2012 Image 8 Security Monitor 2012 Image 9

File System Details

Security Monitor 2012 creates the following file(s):
# File Name Size MD5 Detection Count
1 %USERPROFILE%\Local Settings\Application Data\mfcGLCtrl\msPathTime.dll 155,648 90351a17627d9e1e25c3213da4c17402 148
2 %USERPROFILE%\My Documents\Flash PlayerInstaller.exe 1,100,440 87811bbef2433a2562a68bb08a493281 18
3 %USERPROFILE%2ovsyt9e54.exe 19,408 659016d93cc17add1338e407d38a2d15 4
4 %APPDATA%\Security Monitor\securitymanager.exe 280,576 ef68a96bc9f69ef5b3353dea40f0e57e 2
5 %SystemDrive%\Users\Brandon\AppData\Roaming\Security Monitor\securityhelper.exe 4,844,035 0ac67e08915f2cd8f5e3dea7b0c5faae 1
6 %APPDATA%Edvqvu.scr 327,680 cd2a77b834bb90be3330500240c2062b 1
7 %SystemDrive%\Users\ALUMNOS\AppData\Roaming\2463.exe 46,592 d66745ef5614720b0259cc54ec7bef24 1
8 %AppData%\Security Monitor 2012\securitymanager.exe N/A
9 %AppData%\Security Monitor 2012\Security Monitor.exe N/A
10 %AppData%\Security Monitor 2012\securityhelper.exe N/A
11 %AppData%\Security Monitor 2012\antivirus antispyware.exe N/A
12 %AppData%\Security Monitor 2012\IcoUninstall.ico N/A
13 %Programs%\Security Monitor 2012\Help Security Monitor 2012.lnk N/A
14 %Desctop%\Security Monitor 2012.lnk N/A
15 %Programs%\Security Monitor 2012\Activate Security Monitor 2012.lnk N/A
16 %AppData%\Security Monitor 2012\IcoHelp.ico N/A
17 %Programs%\Security Monitor 2012\Security Monitor 2012.lnk N/A
18 %Programs%\Security Monitor 2012.lnk N/A
19 %Programs%\Security Monitor 2012\ N/A
20 %AppData%\Security Monitor 2012\IcoActivate.ico N/A
21 %AppData%\Security Monitor 2012\ N/A
22 %Programs%\Security Monitor 2012\How to Activate Security Monitor 2012.lnk N/A
23 %AppData%\Microsoft\Internet Explorer\Quick Launch\Security Monitor 2012.lnk N/A
24 %Desktop%\Security Monitor 2012.lnk N/A
More files

Registry Details

Security Monitor 2012 creates the following registry entry or registry entries:
%APPDATA%\Security Monitor
%APPDATA%\Security Monitor 2012
File name without path
Security Monitor.lnk
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Security Monitor 2012 Security”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Security Monitor 2012
HKEY_CURRENT_USER\Software\Security Monitor 2012

More Details on Security Monitor 2012

The following messages associated with Security Monitor 2012 were found:
Insecurity Internet activity. Threat of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms and trojans without knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information. To get full advanced real-time protection for PC and Internet activity, register your antivirus software.
Security Center Alert
To help protect your computer, Security Center has blocked some features of this program.
Name: Win64.BIT.Looker.exe
Risk: High

Site Disclaimer is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.

HTML is not allowed.