Home Malware Programs Rogue Anti-Virus Programs Smart Engine Antivirus

Smart Engine Antivirus

Posted: October 11, 2010

Smart Engine Antivirus (or Smart Engine) is a rogue antivirus program which preys on computer users searching for free media online. Users will download a supposed real media file and unzip it to the hard drive only to discover that there is no media file, only some odd files that can't open. The computer will soon start slowing down and behaving strangely. Then the system will be bombarded by Smart Engine Antivirus pop-ups claiming that the computer is infected with a so-called viruses. Do not fall for this scam and have Smart Engine removed as soon as possible.

Aliases

SmartEngine
SmartEngineAntivirus

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\Smart Engine.lnk
    2 %Documents and Settings%\[UserName]\Application Data\Smart Engine\Instructions.ini
    3 %Documents and Settings%\[UserName]\Desktop\Smart Engine.lnk
    4 %Documents and Settings%\[UserName]\StartMenu\Programs\Smart Engine.lnk
    5 %Documents and Settings%\[UserName]\StartMenu\Smart Engine.lnk
    6 %Documents and Settings%\All Users\Application Data\17acbd\853.mof
    7 %Documents and Settings%\All Users\Application Data\17acbd\SM17a_2211.exe
    8 %Documents and Settings%\All Users\Application Data\17acbd\SmartEngine.exe
    9 %Documents and Settings%\All Users\Application Data\17acbd\SME.ico
    10 %Documents and Settings%\All Users\Application Data\17acbd\SMYEFE\SMYEFE.cfg

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\3HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Smart Engine"HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\MSSSys.DocHostUIHandler

Related Posts

Loading...