Remove Smart Protection 2012

January 30, 2012 By Leave a Comment

Sometimes security experts warn us and say – be smart and protect your PC! However, if you see a security tool which has the name Smart Protection 2012, do not think that it will protect your computer and information. This is another rogueware application which is aimed at misleading computer users into buying its full version. This malicious attacker sneaks into targeted machines without the knowledge or approval of their owners. Not only that, but after it has already gained access to a PC, the intruder roots itself deep into the system and starts its deceitful plan. It makes everything possible to beguile a user into thinking his PC is seriously compromised and needs to be fixed immediately. To mislead users Smart Protection 2012 imitates the layout of a reliable and legitimate AV application, and claims to be able to provide effective security services.

When Smart Protection 2012 wants to penetrate into a targeted PC, it uses two different techniques to do that. One way of penetrating into a system is through malicious web pages which offer a free system scan. The results of the online scan show many compromised files and serious system errors. The attacker tells the user to download some file which will fix his system and will solve any system problems. If the user agrees to download the file, he automatically transfers a severe computer virus to his machine. Another way of penetrating into computers is through malicious web pages which have the ability to exploit vulnerabilities in running programs. The vulnerabilities are used as open doors towards a targeted computer.

When Smart Protection 2012 gains access to a PC, its starts displaying numerous misleading messages. All of these messages warn the user about serious system errors. Even if the person tries to close them, they pop-up again and again. The messages show the following information about the system:

Warning: Your computer is infected
Detected spyware infection!
Click this message to install the last update of security software…

Smart Protection 2012 Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC.
Click here to remove them immediately with Smart Protection 2012

Smart Protection 2012 Warning
Your computer is still infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid theft of your credit card details.
Click here to activate protection.

Furthermore, Smart Protection 2012 creates many infected files and hides them deep into the system. Later, the malicious attacker imitates a reliable system scan and claims to have detected numerous compromised files. In fact, Smart Protection 2012 detects the same files it has created and wants to make the user think that these are some unknown computer viruses and they need to be removed. Smart Protection 2012 imitates a trustworthy security tool and does not let his victim know that it is the cause for all his troubles.

Figure 1. Smart Protection 2012 fake scanner

Smart Protection 2012 also uses other tricks to scare the user into paying for its fake services. The fake AV tool hijacks his browser, and if the user wants to view some security-related page, he is not permitted to do that. The web page is blocked and classified as unsafe. This is due to the fact that it may contain some information that may disclose the true nature of Smart Protection 2012. Furthermore, Smart Protection 2012 is able to prevent from running any legitimate security tool you are trying to use. The fake anti-malware tool will be started instead and the following message will be displayed:

Warning!
Application cannot be executed. The file notepad.exe is infected.
Please activate your antivirus software.

As you can see, Smart Protection 2012 is not a legitimate and reliable AV application. On the contrary, it puts your computer in danger, and it can even make it possible for other malicious files to gain access to your PC. Remove Smart Protection 2012 as soon as possible, and do not let this attacker take your money or misuse your personal and financial information. Do not submit your bank account details and remember that Smart Protection 2012 is just another scam application and it does not provide effective security services.

Filed Under: Spyware Removal Tagged With: , , , ,

Remove Security Monitor 2012

January 30, 2012 By Leave a Comment

Security Monitor 2012 is a newly-appeared fake anti-virus program, sibling to Security Solution 2011. Such programs are also called scareware since they exploit a variety of scare-tactics in order to make the users believe there is a number of viruses in their computer systems. Then the malicious software prompts its victims to purchase its bogus full version.

Just like many other rogues, Security Monitor 2012 uses the help of Trojans, hidden in compromised websites to enter the targeted machines. Unfortunately, mere clicking through such a website is enough for the Trojans to sneak into the PC without the user’s knowledge, and when inside – they immediately open the computer up for the rogue infection. Therefor, we recommend you to avoid following suspicious links or clicking through seemingly fishy websites.

To begin with, Security Monitor 2012 starts creating a number of harmless files in the Windows Temp folder. They are later on used to scare the victim into believing they are viruses. As soon as it is installed, the malicious program also produces great many bogus alerts and notifications, which warn about non-existing security threats. These pop-ups do not seize to appear unless you remove the application causing them – Security Monitor 2012. Some of them are:

Your computer might be at risk
Antivirus detects viruses, worms, and Trojan horses. They can (and do) destroy data, format your hard disk or can destroy the BIOS. By destroying the BIOS many times you end up buying a new motherboard or if the bios chip is removable then that chip would need replacing

Antispyware software warning
Your computer is infected with spyware and malware. Last scan results: 364 infected files found! Click this notification to fix the problem.

System critical warning!
You have been infected by a proxy-relay Trojan server

Security Center
Unauthorized remote connection!
Your system is making an unauthorized personal data transfer to a remote computer!
Warning! Unauthorized personal data transfer is detected! It may be your personal credit card details, logins and passwords, browsing habits or information about files you have downloaded.
To protect your private data, please click “Prevent Connection” button below.


Right after the first few alerts, the rogue’s scanning window pops-up and starts a phony scan of the system. A whole list of infections is displayed at the end of it, but please note that the files in it are the same harmless ones that Security Monitor 2012 has created during the first stage of its malicious plan. Every time a scan is performed, the villain prompts the victim to purchase its counterfeit full version. The sign at the bottom of the scanning window is:

“Trial Version” means a version of the Software to be used only to review, demonstrate and evaluate the Software for an unlimited time period. Converting to a full license is easy! Activate

In case you come across this fraudulent software, you should be aware that its so-called “licensed version” is as useless as the trial one. It can neither detect nor remove viruses, because it is one itself.

Figure 1. Security Monitor 2012 fake scan

In addition to all its other tricks, the rogue can also hijack the victim’s browsers and block other programs present in the computer system. Security Monitor 2012 stops opera.exe, wmplayer.exe, mspaint.exe, wordpad.exe, excel.exe and some other executables as soon as the user tries to run any of them. The deceitful program then displays the following warning:

Security Monitor 2012
The application [name].exe was launched successfully but it was forced to shut down due to security reasons. This application infected by a malicious software program which might present damage for the PC. It is highly recommended to make a full scan of your computer to exterminate the malicious programs from it.

There are two main purposes behind this action – by blocking other software, the rogue tries to scare the victim even more, by declaring that malware has corrupted the given application. What is more, this is also an attempt to prevent itself from being detected from any anti-virus program that may be installed on the computer.

In conclusion, Security Monitor 2012 is not a program that can be trusted. It is just one of the numerous hacker scams, created only to mislead victims into spending their money on a fraud and filling cyber criminals’ pockets. Do not let this malicious software victimize you, but remove Security Monitor 2012 immediately via a genuine AV tool.

Filed Under: Spyware Removal Tagged With: , , , ,

Windows XP Internet Security 2012

January 16, 2012 By Leave a Comment

Windows XP Internet Security 2012 is another fake antivirus program security researchers found. Just like all rogue anti-viruses, it will definitely show pop-ups to tell the user that the computer has been infected by thousands of malwares, trojans and viruses. Windows XP Internet Security 2012 CANNOT detect or remove any kind of infection – it is NOT a security software. Just the opposite – it is infection itself. Windows XP Internet Security 2012 can only lure the user to purchase its full version in order to remove the detected threats. No one should believe to pop-ups or report shown by Windows XP Internet Security 2012. All of these are made-up messages that need to scare the affected user and to empty his pockets. If you find this threat on your machine, please take all measures to remove Windows XP Internet Security 2012 as soon as possible.

Usually this scam is installed on users’ PCs when they visit malevolent websites or use old-dated browsers. Another vector of attack is using spam emails with virus attached. Once Windows XP Internet Security 2012 is successfully planted on a computer, it will make some system changes in order to ensure it will autorun when the PC is powered on. Next, Windows XP Internet Security 2012 starts running fake security scans. As you may suppose, it finds a bunch of Trojans, viruses and worms, stating that the computer is in a great danger. Finally, the scam blocks Windows task manager and registry editor. Impossibility of running these tools makes the manual removal of Windows XP Internet Security 2012 a little bit harder.

Windows XP Internet Security 2012 can be removed manually by stopping all processes with a random name and deleting its files. Finally, it is advised to delete all registry entries added and modified by Windows XP Internet Security 2012.

Internet is not a safe place at all. Once you plug the LAN cable to your computer, you may lose your money, your identity and your privacy. A short advice to our readers: keep your Windows OS with the latest updates, install anti-virus software and surf responsibly.

Filed Under: Spyware Removal Tagged With: , ,

System Check

January 11, 2012 By Leave a Comment

The newest branch on the FakeHDD family of rogues is called System Check and it has already started taking victims. Fake System Check tool is very similar to its siblings in its manner of operation on an infected machine, but it also has some additional pranks included in its bag of tricks.

Since this is not a legitimate system diagnostic software, its advertising methods are extremely malicious and aggressive. It sneaks into the targeted computers by exploiting vulnerabilities found in them. To do so, it uses hacked websites as a hiding place. The user downloads the rogue involuntarily simply by opening the compromised webpage. The other strategy for transmitting the rogue are some malevolent online scanners, advertising System Check. Therefore, it is recommended that you be very cautious when clicking on advertisements and if you want to do so, check online for any user reviews or comments on the advertised product.

When System Check creeps into a PC, it configures itself to start automatically as soon as Windows starts. What follows is a whole bunch of fake pop-up alerts and notifications, all stating that there are some serious hard drive problems which have caused corruption and loss of data:

Hard drive clusters are partly damaged. Segment load failure.
Hard drive clusters are partly damaged. Segment load failure.

Critical Error
Hard drive critical error. Start a system diagnostics application to scan your hard disk for errors and performance problems.

Hard Drive Failure
The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system.

 

System Error
An error occurred while reading system files. Run a system diagnostic utility to check your hard disk drive for errors.

These System Check pop-ups, though, are just the first part of a series of lies aimed at misleading the victim into thinking there are indeed some critical computer problems. When it achieves its purpose of scaring the user, the fake program promotes its phony licensed version as the best solution to the presumable problems.

The list of cons of System Check, however, does not end with the bogus alerts. It also displays error messages when the victim tries to launch programs or delete files and then its made-up scanning tool comes forth. At end of the scan, a counterfeit table of errors is presented. The user is prompted to click on “Fix Errors” and as a result of this action, fake System Check pretends to be repairing some of the errors. At the end of this made-up operation, it declares that only the full version of the software is capable of fixing all the errors.

The extra-treachery included in the scam called System Check is that the program deletes random shortcuts and stores their backups in the %Temp%\smtmp folder (hence, it is very important not to delete any files from this folder in case your computer is infected with this malware). What is more, the rogue blocks other programs from being launched. This is a desperate attempt to make it impossible for you to start your legitimate anti-virus tool that is most surely going to detect the malware. If you are persistent, however, and try to launch the particular application several times, you will eventually succeed.

As a result of a System Check infection, some of your folders’ content might disappear or be replaced. There is no need to worry – this is a reversible process since the data is only hidden, not deleted. Once you get rid of the infection, you can show the hidden files. Meanwhile, the deceitful warnings will continue to pop-up from various places, some of them from your Windows Taskbar:

Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.

System Check
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.

Low Disk Space
You are running very low disk space on Local Disk (C:).

Windows – No Disk
Exception Processing Message 0×0000013

Critical Error
Hard drive clusters are partly damaged. Segment load failure.

The most dangerous feature of this rogue is that it is capable of installing TDSS or ZeroAccess rootkits, which try to block any anti-virus programs.

In conclusion, everything produced by System Check, whether alerts or PC scans, is fraudulent. The mere fact that the program uses such aggressive advertising strategies is enough to make you feel there is something fishy about it. Despite the fact that some of its tricks might seem very scary, you should not let it deceive you into spending your money on the fake product. In case System Check has already succeeded in entering your computer system, you should immediately run a full scan of the PC with a genuine AV software that can locate and remove the malicious files.

Filed Under: Spyware Removal Tagged With: , ,

Remove AV Protection 2012

November 24, 2011 By Leave a Comment

AV Protection 2012 is one of the latest rogueware applications detected by reliable security tools. This latest creation of cyber criminals pretends to be a legitimate and effective anti-malware tool, but, in fact, is just a scam application made to deceive people into thinking their computers are seriously infected.

None of the error messages and frightening scan results displayed by this fake tools show accurate information. Do not be tricked into thinking you have to pay for this malicious tool to fix your machine. The only infection present on your machine is the attacker itself and it has to be replaced with genuine security tool.

Remove the rogueware as soon as possible.

[Read more...]

Filed Under: Spyware Removal Tagged With: , ,

Remove Cloud AV 2012

November 24, 2011 By Leave a Comment

Cloud AV 2012 is the latest member of the family that Cloud Protection belongs to. The newly-appeared rogue is famous for its deceptive interface and cunning manner of frightening users into purchasing its fake full version.

Via Trojans, hidden in compromised websites and online scanners, the rogue makes its way towards the targeted computer. When inside it first makes sure to create its own registry entries in order to get started automatically as soon as the victim turns on the PC. Just like most other phony anti-virus applications, this one produces an enoprmous amount of bogus alerts and notifications and then evokes a fake scanning tool. The scan results are preliminary – the viruses inside it are either non-existent or made-up. The last step of the evil plan is to promote Cloud AV 2012 as a solution to the imaginary threats the scans have found.

In case you have noticed Cloud AV 2012 operating on your computer, remove the rogueware as soon as possible.
[Read more...]

Filed Under: Spyware Removal Tagged With: , ,

Remove Windows Fix

November 23, 2011 By Leave a Comment

Windows Fix is a fake AV application which pretends to be a reliable and effective anti-malware program. The deceitful tool imitates the layout of real security software and thus misleads its victims into thinking Windows Fix will help them and fix all computer errors. However, none of the fake messages displayed are real. The system scan results also do not show accurate information about the performance of the targeted PC.

The one and only aim of this fake software is to trick you into paying for its full version. However, as this program is not a legitimate and effective anti-malware tool, it will only take your money and give you nothing in return. Furthermore, if you overlook the presence of this intruder, it may cause really serious system problems.

Remove the rogueware as soon as possible.

[Read more...]

Filed Under: Spyware Removal Tagged With: , ,

Remove Computer Fix

November 22, 2011 By Leave a Comment

Computer Fix is a newly invented rogue optimization application. It belongs to the same rogue family as System Fix and System Restore and it even resembles the two of them in appearance.

Computer Fix uses hacked websites as a platform to transmit the infection. It exploits vulnerabilities in the targeted computers in order to enter them. As soon as it manages to get inside the system, it starts deleting shortcuts from random locations and hides the content of some folders. It also evokes numerous alerts and notifications. This is done with the only aim to make the victim believe there is a serious computer problem. The fake scanning tool is also a part of the hacking scheme. The scans claim to have found many errors and then prompt the user to purchase the bogus full version of Computer Fix.

Do not let this fraudulent program deceive you. Remove it as soon as possible.

[Read more...]

Filed Under: Spyware Removal Tagged With: , ,

Remove AV Protection 2011

November 18, 2011 By Leave a Comment

AV Protection 2011 is a newly-appeared rogue that might seem familiar to those of you who have seen AV Security 2012. The two rogues operate in a similar manner, with their only goal being gaining profit from victims.

Using Trojans, the infection creeps into the targeted computer. It then starts constantly producing fake alerts and warnings that claim the PC is at great security risk. Then a bogus scanning tool appears to further consolidate the statements from the alerts. As a result of the scan, the user is prompted to purchase the phony full version of AV Protection 2011.

In case you have noticed AV Protection 2011 working on your computer, remove the rogueware as soon as possible.

[Read more...]

Filed Under: Spyware Removal Tagged With: , ,

Remove System Fix

November 15, 2011 By Leave a Comment

System Fix is the newest member of the fake HDD family. It pretends to be an optimization tool and thus lures victims into purchasing its fake full version. If the victim is not convinced by the name and appearance, the rogue uses different deception techniques in order to scare the user into buying the program.

Hackers use different strategies for infecting the targeted computers. Once the rogue is inside the system, it creates bogus alerts and notifications to make the victim believe there are serious HDD and system errors to be repaired. To further consolidate this statement, the malware evokes its phony scan tool that claims there are various errors that need solution and then recommends System Fix’s full version as the best solution. Its ” full version”, however, is also fraudulent and you should not spend your money on it!

The villain also prevents some programs from being launched and hides various shortcuts, so you should remove it as soon as possible.

[Read more...]

Filed Under: Spyware Removal Tagged With: , ,
« Older Posts
Newer Posts »