Home Malware Programs Rogue Anti-Spyware Programs Security Monitor 2012

Security Monitor 2012

Posted: December 14, 2011

Threat Metric

Ranking: 9,534
Threat Level: 10/10
Infected PCs: 487
First Seen: December 14, 2011
Last Seen: July 13, 2021
OS(es) Affected: Windows

Security Monitor 2012 Screenshot 1Security Monitor 2012 is a rogue anti-spyware program that creates inaccurate system scans and other forms of fake alerts to confuse you about your computer's health. Although Security Monitor 2012 wants you to believe that you should spend money on its full version to solve any problems that you may be experiencing, browser redirect attacks, software malfunctions and other issues are actually caused by Security Monitor 2012 or a related type of PC threat (such as an affiliated rootkit or dropper Trojan). SpywareRemove.com malware analysts recommend that you get rid of Security Monitor 2012 in short order by scanning your PC with a solid anti-malware program, although preliminary steps (such as rebooting into Safe Mode) may also be necessary to insure Security Monitor 2012's complete removal.

Walking Back Through Security Monitor 2012's Questionable Lineage

Security Monitor 2012 is a clone of other types of fake anti-malware products from the same family and uses the same type of interface, error messages and attacks against your PC as its relatives. Security Monitor 2012 and similar forms of fake anti-malware programs are propagated by malicious websites that use inaccurate marketing to make visitors believe that Security Monitor 2012 is a genuine and reliable product. However, SpywareRemove.com malware experts haven't found any signs that Security Monitor 2012 can actually detect or remove spyware (or any other type of PC threat, for that matter). Some sites that have been known to spread members of the Security Monitor 2012 family include securitysolution2011.com, securitysolution2011ltd.com, securitysolution2011corp.com and antivirussystem2011tech.com.

Relatives of Security Monitor 2012 from the WinWeb Security family include both anti-spyware and anti-virus programs such as Antivirus Security, System Security, AntiSpyware Pro 2009, Total Security, Total Security 2009, Security Tool, Trojan.RogueAV.a.gen, System Adware Scanner 2010, FakeAlert-KW.e, Advanced Security Tool 2010, System Tool 2011, Security Shield, MS Removal Tool, Personal Shield Pro, Advanced PC Shield 2012, Security Sphere 2012, Futurro Antivirus and Antivirus Center. Error messages that you may see from Security Monitor 2012 or any rogue anti-malware applications in its subgroup can include:

System critical warning!
You have been infected by a proxy-relay Trojan server

Security Center Alert
To help protect your computer, Security Center has blocked some features of this program.
Name: Screen.Grab.J.exe
Risk: High

Reported Insecure Browsing: Navigation Blocked
Insecure Internet Activity. Threat of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms, and Trojans without your knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information.

Security Center
Unauthorized remote connection!
Your system is making an unauthorized personal data transfer to a remote computer!
Warning! Unauthorized personal data transfer is detected! It may be your personal credit card details, logins and passwords, browsing habits or information about files you have downloaded.
To protect your private data, please click "Prevent Connection" button below.

Your computer might be at risk
Antivirus detects viruses, worms, and Trojan horses. They can (and do) destroy data, format your hard disk or can destroy the BIOS. By destroying the BIOS many times you end up buying a new motherboard or if the bios chip is removable then that chip would need replacing

Antispyware software warning
Your computer is infected with spyware and malware. Last scan results: 364 infected files found! Click this notification to fix the problem.

Getting Security Monitor 2012 Out of Your Monitor and Well Away from Your PC

SpywareRemove.com malware researchers warn that, along with its fake alerts and other forms of inaccurate warnings, Security Monitor 2012 may also be involved in browser redirect attacks that redirect you to hostile sites, malfunctioning PC security software or altering system settings that reduce your computer's security. These attacks can be stopped, not by purchasing Security Monitor 2012, but by removing Security Monitor 2012 just as you would remove any form of Trojan or virus – with a suitable anti-malware application. If necessary to prevent Security Monitor 2012 from interfering with its own deletion, you can fake registration of Security Monitor 2012 with the serial key 'LIC2-00A6-234C-B6A9-38F8-F6E2-0838-F084-E235-6051-18B3.'

SpywareRemove.com malware researchers discourage attempts to delete Security Monitor 2012 by the same methods that you would use to uninstall a normal program, since Security Monitor 2012 will make changes to the Windows Registry and may conceal its files within important folders (such as your Windows directory). Using Safe Mode may also be required to run an appropriate type of anti-malware scanner without Security Monitor 2012 blocking it.

Security Monitor 2012 Screenshot 2Security Monitor 2012 Screenshot 3Security Monitor 2012 Screenshot 4Security Monitor 2012 Screenshot 5Security Monitor 2012 Screenshot 6Security Monitor 2012 Screenshot 7Security Monitor 2012 Screenshot 8Security Monitor 2012 Screenshot 9

Aliases

Adware/Zugo [Fortinet]Trojan.PWS.Banker.62728 [DrWeb]a variant of Win32/Toolbar.Zugo [NOD32]Artemis!87811BBEF243 [McAfee]Dropper.Generic6.ACLT [AVG]W32/Jorik_IRCbot.ABH!tr [Fortinet]Trojan.Win32.Vilsel [Ikarus]Trojan/Win32.Jorik.gen [Antiy-AVL]TR/Pincav.L [AntiVir]BackDoor.IRC.NgrBot.42 [DrWeb]Mal/VB-ABH [Sophos]Gen:Variant.Barys.5089 [BitDefender]Trojan.Win32.Jorik.IRCbot.nis [Kaspersky]Win32:IRCBot-ETV [Trj] [Avast]Trojan.Gen.2 [Symantec]
More aliases (96)

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Security Monitor 2012 may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%USERPROFILE%\Local Settings\Application Data\mfcGLCtrl\msPathTime.dll File name: msPathTime.dll
Size: 155.64 KB (155648 bytes)
MD5: 90351a17627d9e1e25c3213da4c17402
Detection count: 347
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%\Local Settings\Application Data\mfcGLCtrl\
Group: Malware file
Last Updated: January 26, 2012
%USERPROFILE%\My Documents\Flash PlayerInstaller.exe File name: Flash PlayerInstaller.exe
Size: 1.1 MB (1100440 bytes)
MD5: 87811bbef2433a2562a68bb08a493281
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\My Documents\
Group: Malware file
Last Updated: December 17, 2012
%SystemDrive%\Users\Brandon\AppData\Roaming\Security Monitor\securityhelper.exe File name: securityhelper.exe
Size: 4.84 MB (4844035 bytes)
MD5: 0ac67e08915f2cd8f5e3dea7b0c5faae
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\Brandon\AppData\Roaming\Security Monitor\
Group: Malware file
Last Updated: December 19, 2011
%USERPROFILE%\2ovsyt9e54.exe File name: 2ovsyt9e54.exe
Size: 19.4 KB (19408 bytes)
MD5: 659016d93cc17add1338e407d38a2d15
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\
Group: Malware file
Last Updated: December 11, 2012
%APPDATA%\Security Monitor\securitymanager.exe File name: securitymanager.exe
Size: 280.57 KB (280576 bytes)
MD5: ef68a96bc9f69ef5b3353dea40f0e57e
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Security Monitor\
Group: Malware file
Last Updated: December 15, 2011
%APPDATA%\Edvqvu.scr File name: Edvqvu.scr
Size: 327.68 KB (327680 bytes)
MD5: cd2a77b834bb90be3330500240c2062b
Detection count: 1
Mime Type: unknown/scr
Path: %APPDATA%\
Group: Malware file
Last Updated: December 11, 2012
%Documents and Settings%\{UserName}\Desktop\Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Desktop\Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Documents and Settings%\{UserName}\Local Settings\Temp\{random}.exe File name: %Documents and Settings%\{UserName}\Local Settings\Temp\{random}.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\ File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\IcoActivate.ico File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\IcoActivate.ico
Mime Type: unknown/ico
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\IcoHelp.ico File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\IcoHelp.ico
Mime Type: unknown/ico
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\IcoUninstall.ico File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\IcoUninstall.ico
Mime Type: unknown/ico
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\Security Monitor.exe File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\Security Monitor.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\securityhelper.exe File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\securityhelper.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\securitymanager.exe File name: %Documents and Settings%\{UserName}\Application Data\Security Monitor 2012\securitymanager.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%Documents and Settings%\{UserName}\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\ File name: %Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\
Group: Malware file
%Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\Activate Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\Activate Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\Help Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\Help Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\How to Activate Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\How to Activate Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\Security Monitor 2012.lnk File name: %Documents and Settings%\{UserName}\Start Menu\Programs\Security Monitor 2012\Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%AppData%\Security Monitor 2012\securityhelper.exe File name: %AppData%\Security Monitor 2012\securityhelper.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%AppData%\Security Monitor 2012\securitymanager.exe File name: %AppData%\Security Monitor 2012\securitymanager.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%AppData%\Security Monitor 2012\antivirus antispyware.exe File name: %AppData%\Security Monitor 2012\antivirus antispyware.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%Programs%\Security Monitor 2012\Security Monitor 2012.lnk File name: %Programs%\Security Monitor 2012\Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%Desktop%\Security Monitor 2012.lnk File name: %Desktop%\Security Monitor 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file

More files

Registry Modifications

The following newly produced Registry Values are:

Directory%APPDATA%\Security Monitor%APPDATA%\Security Monitor 2012File name without pathSecurity Monitor.lnkHKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Security Monitor 2012HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform "(Default)" = ""HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Security Monitor 2012"

Additional Information

The following messages's were detected:
# Message
1Insecurity Internet activity. Threat of virus attack Due to insecure Internet browsing your PC can easily get infected with viruses, worms and trojans without knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information. To get full advanced real-time protection for PC and Internet activity, register your antivirus software.
2Security Center Alert To help protect your computer, Security Center has blocked some features of this program. Name: Win64.BIT.Looker.exe Risk: High

One Comment

  • Soraya Gordley says:

    Truly good site thank you so much for your time in publishing the posts for all of us to learn about.