Home Malware Programs Rogue Anti-Spyware Programs Security Monitor 2012

Security Monitor 2012

Posted: December 14, 2011

Threat Metric

Ranking: 14,623
Threat Level: 10/10
Infected PCs: 527
First Seen: December 14, 2011
Last Seen: August 19, 2023
OS(es) Affected: Windows

Security Monitor 2012 Screenshot 1Security Monitor 2012 is a rogue anti-spyware program that creates inaccurate system scans and other forms of fake alerts to confuse you about your computer's health. Although Security Monitor 2012 wants you to believe that you should spend money on its full version to solve any problems that you may be experiencing, browser redirect attacks, software malfunctions and other issues are actually caused by Security Monitor 2012 or a related type of PC threat (such as an affiliated rootkit or dropper Trojan). SpywareRemove.com malware analysts recommend that you get rid of Security Monitor 2012 in short order by scanning your PC with a solid anti-malware program, although preliminary steps (such as rebooting into Safe Mode) may also be necessary to insure Security Monitor 2012's complete removal.

Walking Back Through Security Monitor 2012's Questionable Lineage

Security Monitor 2012 is a clone of other types of fake anti-malware products from the same family and uses the same type of interface, error messages and attacks against your PC as its relatives. Security Monitor 2012 and similar forms of fake anti-malware programs are propagated by malicious websites that use inaccurate marketing to make visitors believe that Security Monitor 2012 is a genuine and reliable product. However, SpywareRemove.com malware experts haven't found any signs that Security Monitor 2012 can actually detect or remove spyware (or any other type of PC threat, for that matter). Some sites that have been known to spread members of the Security Monitor 2012 family include securitysolution2011.com, securitysolution2011ltd.com, securitysolution2011corp.com and antivirussystem2011tech.com.

Relatives of Security Monitor 2012 from the WinWeb Security family include both anti-spyware and anti-virus programs such as Antivirus Security, System Security, AntiSpyware Pro 2009, Total Security, Total Security 2009, Security Tool, Trojan.RogueAV.a.gen, System Adware Scanner 2010, FakeAlert-KW.e, Advanced Security Tool 2010, System Tool 2011, MS Removal Tool, Antivirus Center, Security Shield, Personal Shield Pro, Advanced PC Shield 2012, Security Sphere 2012 and Futurro Antivirus. Error messages that you may see from Security Monitor 2012 or any rogue anti-malware applications in its subgroup can include:

System critical warning!
You have been infected by a proxy-relay Trojan server

Security Center Alert
To help protect your computer, Security Center has blocked some features of this program.
Name: Screen.Grab.J.exe
Risk: High

Reported Insecure Browsing: Navigation Blocked
Insecure Internet Activity. Threat of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms, and Trojans without your knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information.

Security Center
Unauthorized remote connection!
Your system is making an unauthorized personal data transfer to a remote computer!
Warning! Unauthorized personal data transfer is detected! It may be your personal credit card details, logins and passwords, browsing habits or information about files you have downloaded.
To protect your private data, please click "Prevent Connection" button below.

Your computer might be at risk
Antivirus detects viruses, worms, and Trojan horses. They can (and do) destroy data, format your hard disk or can destroy the BIOS. By destroying the BIOS many times you end up buying a new motherboard or if the bios chip is removable then that chip would need replacing

Antispyware software warning
Your computer is infected with spyware and malware. Last scan results: 364 infected files found! Click this notification to fix the problem.

Getting Security Monitor 2012 Out of Your Monitor and Well Away from Your PC

SpywareRemove.com malware researchers warn that, along with its fake alerts and other forms of inaccurate warnings, Security Monitor 2012 may also be involved in browser redirect attacks that redirect you to hostile sites, malfunctioning PC security software or altering system settings that reduce your computer's security. These attacks can be stopped, not by purchasing Security Monitor 2012, but by removing Security Monitor 2012 just as you would remove any form of Trojan or virus – with a suitable anti-malware application. If necessary to prevent Security Monitor 2012 from interfering with its own deletion, you can fake registration of Security Monitor 2012 with the serial key 'LIC2-00A6-234C-B6A9-38F8-F6E2-0838-F084-E235-6051-18B3.'

SpywareRemove.com malware researchers discourage attempts to delete Security Monitor 2012 by the same methods that you would use to uninstall a normal program, since Security Monitor 2012 will make changes to the Windows Registry and may conceal its files within important folders (such as your Windows directory). Using Safe Mode may also be required to run an appropriate type of anti-malware scanner without Security Monitor 2012 blocking it.

Security Monitor 2012 Screenshot 2Security Monitor 2012 Screenshot 3Security Monitor 2012 Screenshot 4Security Monitor 2012 Screenshot 5Security Monitor 2012 Screenshot 6Security Monitor 2012 Screenshot 7Security Monitor 2012 Screenshot 8Security Monitor 2012 Screenshot 9

Aliases

Adware/Zugo [Fortinet]Trojan.PWS.Banker.62728 [DrWeb]a variant of Win32/Toolbar.Zugo [NOD32]Artemis!87811BBEF243 [McAfee]Dropper.Generic6.ACLT [AVG]W32/Jorik_IRCbot.ABH!tr [Fortinet]Trojan.Win32.Vilsel [Ikarus]Trojan/Win32.Jorik.gen [Antiy-AVL]TR/Pincav.L [AntiVir]BackDoor.IRC.NgrBot.42 [DrWeb]Mal/VB-ABH [Sophos]Gen:Variant.Barys.5089 [BitDefender]Trojan.Win32.Jorik.IRCbot.nis [Kaspersky]Win32:IRCBot-ETV [Trj] [Avast]Trojan.Gen.2 [Symantec]
More aliases (96)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%USERPROFILE%\Local Settings\Application Data\mfcGLCtrl\msPathTime.dll File name: msPathTime.dll
Size: 155.64 KB (155648 bytes)
MD5: 90351a17627d9e1e25c3213da4c17402
Detection count: 347
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%\Local Settings\Application Data\mfcGLCtrl
Group: Malware file
Last Updated: January 26, 2012
C:\Users\<username>\Documents\Ann\Downloads\Flash PlayerInstaller.exe File name: Flash PlayerInstaller.exe
Size: 1.1 MB (1100440 bytes)
MD5: 87811bbef2433a2562a68bb08a493281
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\Documents\Ann\Downloads\Flash PlayerInstaller.exe
Group: Malware file
Last Updated: February 27, 2023
%SystemDrive%\Users\<username>\AppData\Roaming\Security Monitor\securityhelper.exe File name: securityhelper.exe
Size: 4.84 MB (4844035 bytes)
MD5: 0ac67e08915f2cd8f5e3dea7b0c5faae
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Roaming\Security Monitor
Group: Malware file
Last Updated: December 19, 2011
%USERPROFILE%\2ovsyt9e54.exe File name: 2ovsyt9e54.exe
Size: 19.4 KB (19408 bytes)
MD5: 659016d93cc17add1338e407d38a2d15
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%
Group: Malware file
Last Updated: December 11, 2012
%APPDATA%\Security Monitor\securitymanager.exe File name: securitymanager.exe
Size: 280.57 KB (280576 bytes)
MD5: ef68a96bc9f69ef5b3353dea40f0e57e
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Security Monitor
Group: Malware file
Last Updated: December 15, 2011
%APPDATA%\Edvqvu.scr File name: Edvqvu.scr
Size: 327.68 KB (327680 bytes)
MD5: cd2a77b834bb90be3330500240c2062b
Detection count: 1
Mime Type: unknown/scr
Path: %APPDATA%
Group: Malware file
Last Updated: December 11, 2012
%Documents and Settings%\{UserName}\Desktop\Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Desktop\Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Documents and Settings%\{UserName}\Local Settings\Temp\{random}.exe File name: %Documents and Settings%\{UserName}\Local Settings\Temp\{random}.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\ File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\IcoActivate.ico File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\IcoActivate.ico
Mime Type: unknown/ico
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\IcoHelp.ico File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\IcoHelp.ico
Mime Type: unknown/ico
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\IcoUninstall.ico File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\IcoUninstall.ico
Mime Type: unknown/ico
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\Security Monitor.exe File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\Security Monitor.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\securityhelper.exe File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\securityhelper.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\securitymanager.exe File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\securitymanager.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\ File name: %Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\
Group: Malware file
%Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\Activate Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\Activate Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\Help Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\Help Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\How to Activate Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\How to Activate Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%AppData%\Security Monitor 2012\securityhelper.exe File name: %AppData%\Security Monitor 2012\securityhelper.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%AppData%\Security Monitor 2012\securitymanager.exe File name: %AppData%\Security Monitor 2012\securitymanager.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%AppData%\Security Monitor 2012\antivirus antispyware.exe File name: %AppData%\Security Monitor 2012\antivirus antispyware.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%Programs%\Security Monitor 2012\Security Monitor 2012.lnk File name: %Programs%\Security Monitor 2012\Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Desktop%\Security Monitor 2012.lnk File name: %Desktop%\Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

File name without pathSecurity Monitor.lnkHKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Security Monitor 2012HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform "(Default)" = ""HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Security Monitor 2012"

Additional Information

The following directories were created:
%APPDATA%\Security Monitor%APPDATA%\Security Monitor 2012
The following messages's were detected:
# Message
1Insecurity Internet activity. Threat of virus attack Due to insecure Internet browsing your PC can easily get infected with viruses, worms and trojans without knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information. To get full advanced real-time protection for PC and Internet activity, register your antivirus software.
2Security Center Alert To help protect your computer, Security Center has blocked some features of this program. Name: Win64.BIT.Looker.exe Risk: High

One Comment

  • Soraya Gordley says:

    Truly good site thank you so much for your time in publishing the posts for all of us to learn about.

Loading...