Smart Protection 2012

Smart Protection 2012 Description

ScreenshotSmart Protection 2012 is a fake antivirus application that is installed by a Trojan infection. According to ESG security researchers, Smart Protection 2012 has absolutely no anti-virus capabilities. Although this fake antivirus program installs various files and has all external characteristics of a normal anti-virus application, Smart Protection 2012's interface is just for show. This application belongs to the WinWeb Security family and uses an outstanding online scam created to take advantage of inexperienced computer users and to scam them into buying useless software.

Smart Protection 2012 is a clone of other anti-virus programs such as System Security, Total Security, Antivirus Security, Total Security 2009, Security Tool, Trojan.RogueAV.a.gen, System Adware Scanner 2010, FakeAlert-KW.e, Advanced Security Tool 2010, System Tool 2011, Security Shield, MS Removal Tool, Antivirus Center, Antivirus Center, Essential Cleaner, Security Shield Pro 2011, Personal Shield Pro, Security Shield 2011, Advanced PC Shield 2012, Security Sphere 2012.

The worst part of Smart Protection 2012 is the fact that Smart Protection 2012 will deliberately cause problems on the victim's computer system in order to cause the victim to panic. If you have installed Smart Protection 2012 on your computer system, it is essential that you use a real anti-virus program to remove Smart Protection 2012 from your hard drive. Failure to remove Smart Protection 2012 makes your computer more vulnerable to additional malware infections as well as placing you at risk for identity theft. A good reason to remove Smart Protection 2012 is also the fact that your computer's normal operation is severely affected as long as this fake security program remains on your hard drive.

How Smart Protection 2012 Attempts to Steal Your Money

The Smart Protection 2012 scam is quite simple. This fake antivirus program will tries to persuade its victim that their computer is under a severe malware attack. Then, Smart Protection 2012 will offer to remove the imaginary problem as long as the victim is willing to register Smart Protection 2012 by purchasing a registration code. Of course, since Smart Protection 2012 has no anti-virus capabilities, paying for this fake security program is not a good idea. Some ways in which Smart Protection 2012 attempts to convince its victims of the presence of a severe malware infection are listed below:

  • Smart Protection 2012 displays constant fake error messages and security alerts, some of these appearing to come from the victim's computer system rather than from Smart Protection 2012 itself.
  • The presence of Smart Protection 2012 on a computer system will usually cause it to become slow and unstable, adding to the illusion of a severe malware attack.
  • Smart Protection 2012 has also been known to cause browser redirects to malicious websites promoting rogue security programs. Smart Protection 2012 may also block user's ability to connect to other websites.


Aliases: Suspicious file [Panda] and TR/Dropper.Gen2 [AntiVir].

Do You Suspect Your PC May Be Infected with Smart Protection 2012 & Other Threats? Scan Your PC with SpyHunter

SpyHunter is a powerful malware remediation and protection tool designed to help provide PC users with in-depth system security analysis, detection and removal of a wide range of threats like Smart Protection 2012 as well as a one-on-one tech support service. Download SpyHunter's FREE Malware Remover
Note: SpyHunter's scanner is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware removal tool to remove the malware threats. Read more on SpyHunter. Free Remover allows you to run a one-off scan and receive, subject to a 48-hour waiting period, one remediation and removal. Free Remover subject to promotional details and Special Promotion Terms. To understand our policies, please also review our EULA, Privacy Policy and Threat Assessment Criteria. If you no longer wish to have SpyHunter installed on your computer, follow these steps to uninstall SpyHunter.

Security Doesn't Let You Download SpyHunter or Access the Internet?

Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in "Safe Mode with Networking" and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.
If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Screenshots & Other Imagery

Tip: Turn your sound ON and watch the video in Full Screen mode to fully experience how Smart Protection 2012 infects a computer.

Is your PC Infected with Smart Protection 2012?

File System Details

Smart Protection 2012 creates the following file(s):
# File Name Size MD5 Detection Count
1 %ALLUSERSPROFILE%\B7E8586B0003F65D001EE87DB4EB2367\B7E8586B0003F65D001EE87DB4EB2367.exe 315,392 5768fbcf56ee42e51697c9a65bc09259 1
2 %CommonAppData%\\.exe N/A
3 %AppData%\Microsoft\Windows\Start Menu\Smart Protection 2012.lnk N/A
4 %CommonAppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS] N/A
5 %AllUsersProfile%\[RANDOM CHARACTERS]\ N/A
6 %CommonAppData%\[RANDOM CHARACTERS]\ N/A
7 %UserProfile%\Desktop\Smart Protection 2012.lnk N/A
8 %AppData%\Microsoft\Windows\Start Menu\Programs\Smart Protection 2012.lnk N/A
9 C:\ProgramData\529C5390000413CA0A1CB82DB4EB2367\529C5390000413CA0A1CB82DB4EB2367.exe 315,392 092d1896584e15ae367a9a06a93a0ac8 0
More files

Registry Details

Smart Protection 2012 creates the following registry entry or registry entries:
Directory
%USERPROFILE%\Start Menu\Programs\Smart Protection 2012
File name without path
Smart Protection 2012.lnk
Uninstaller
Smart Protection 2012
RegistryKey
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[1 RANDOM]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their PC with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your PC. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

One Comment

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.