Smart Fortress 2012

Smart Fortress 2012 Description

ScreenshotSmart Fortress 2012 is a fake anti-spyware scanner and a component of a huge family of rogue security applications called WinWeb Security. These kinds of fake security programs are designed to display messages claiming that the victim's computer system is infected in an attempt to convince inexperienced computer users to purchase a useless 'full version' of Smart Fortress 2012. Since Smart Fortress 2012 has absolutely no way of detecting or removing malware, ESG security researchers strongly advise against taking any of Smart Fortress 2012's claims seriously. ESG malware analysts recommend using a reliable anti-malware application to kick Smart Fortress 2012 out of your computer system.

There are various clones of Smart Fortress 2012, including programs like System Security, Antivirus Security, Total Security 2009, Security Tool, Trojan.RogueAV.a.gen, System Adware Scanner 2010, FakeAlert-KW.e, Advanced Security Tool 2010, System Tool 2011, Security Shield, MS Removal Tool, Total Security, System Security 2011, Antivirus Center, Essential Cleaner, Security Shield Pro 2011, Personal Shield Pro, Security Shield 2011, Security Sphere 2012, Advanced PC Shield 2012.

Why You Should Not Trust Smart Fortress 2012's Supposed Security

Smart Fortress 2012 uses an interface that rips off Windows Security Center in an attempt to convince its victims that Smart Fortress 2012 is a legitimate security application. It uses a fake system scan and a number of authentic-looking error messages in order to convince its victims of an imaginary infection on their PC. In fact, the real threat to your computer's security is Smart Fortress 2012 itself. This application is designed to attempt to disable any security software on the infected computer as well as interfering with your web browser and with your files. Smart Fortress 2012's family of rogue security scanners can force your web browser to visit malicious websites, often websites containing pornographic content, attack websites designed to infect your computer with further malware or websites related to Smart Fortress 2012. Smart Fortress 2012 and its clones can also hide your files, making it appear as if they have been deleted or block you access to your applications, displaying an error message claiming that Smart Fortress 2012 does so for 'your own security'.

Dealing with a Smart Fortress 2012 Infection

Smart Fortress 2012 has been known to block security software. Smart Fortress 2012 has also been known to block access to the Terminal, the Registry Editor, System Restore and the Task Manager, all vital Windows components when it comes to dealing with security threats. Because of this, it is important to start up your computer system in Safe Mode to prevent Smart Fortress 2012 from loading automatically. It is also important to ensure that your security software is fully updated so that it will detect Smart Fortress 2012 as a hostile presence on your computer system.

Technical Information

Screenshots & Other Imagery

Tip: Turn your sound ON and watch the video in Full Screen mode to fully experience how Smart Fortress 2012 infects a computer.

Smart Fortress 2012 Video

Smart Fortress 2012 Image 1 Smart Fortress 2012 Image 2 Smart Fortress 2012 Image 3 Smart Fortress 2012 Image 4 Smart Fortress 2012 Image 5 Smart Fortress 2012 Image 6 Smart Fortress 2012 Image 7 Smart Fortress 2012 Image 8

File System Details

Smart Fortress 2012 creates the following file(s):
# File Name Size MD5
1 %UserProfile%\Application Data\[RANDOM DIGITS]\[RANDOM DIGITS].exe
2 %CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS].exe
3 %CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS]
4 %CommonAppData%\[RANDOM 33 CHARACTERS]
5 %ALLUSERSPROFILE%\Application Data\F4D55F3B000083BB000405A5D151FC4E\F4D55F3B000083BB000405A5D151FC4E.exe 360,448 6379eba67e654d595ec2aeeb7c9c87be

Registry Details

Smart Fortress 2012 creates the following registry entry or registry entries:
Directory
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Smart Fortress 2012
%APPDATA%\Microsoft\Windows\Start Menu\Programs\Smart Fortress 2012
Uninstaller
Smart Fortress 2012
File name without path
Smart Fortress 2012.lnk
RegistryKey
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[RANDOM]"
HKEY_USERS\S-1-5-21-861567501-152049171-1708537768-1003_Classes\%s "(Default)" = "[RANDOM 4 CHARACTERS]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[RANDOM DIGITS].exe"
HKEY_CURRENT_USER\Software\Classes\[RANDOM 4 CHARACTERS]
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = "[RANDOM 4 CHARACTERS]"
HKEY_CURRENT_USER\Software\Classes\[RANDOM 4 CHARACTERS]\shell\open\command "(Default)" = "%CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS].exe" -s "%1" %*
HKEY_CLASSES_ROOT\[RANDOM 4 CHARACTERS]
HKEY_USERS\S-1-5-21-861567501-152049171-1708537768-1003_Classes\[RANDOM 4 CHARACTERS]\shell\open\command "(Default)" = "%CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS].exe" -s "%1" %*

More Details on Smart Fortress 2012

The following messages associated with Smart Fortress 2012 were found:
Security Monitor: WARNING!
Attention! System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. Your private information and PC safety is at risk.
To get rid of unwanted spyware and keep your computer safe you need to update your current security software.
Click Yes to download official intrusion detection system (IDS software).
Smart Fortress 2012 Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC.
Click here to remove them immediately with Smart Fortress 2012
Warning!
Application cannot be executed. The file notepad.exe is infected.
Please activate your antivirus software.
Warning: Your computer is infected
Detected spyware infection!
Click this message to install the last update of security software...

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

One Comment

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.