Smart Fortress 2012

Posted: February 28, 2012
Threat Metric
Threat Level: 10/10
Infected PCs 806

Smart Fortress 2012 Description

Smart Fortress 2012 Screenshot 1Smart Fortress 2012 is a recent clone of System Tool, a rogue anti-malware program that's noted for its characteristic pink-hued interface. Like other members of the WinWeb Security family, Smart Fortress 2012 will create fake warning messages and simulated scans that contain dire results to make you believe that your PC is severely infected by multiple types of PC threats. Although Smart Fortress 2012 will offer its purchasable anti-malware services to fix this situation, SpywareRemove.com malware researchers emphasize the fact that Smart Fortress 2012 isn't able to detect or remove any type of malicious software. Accordingly, the best thing to do with your funds is to save it or spend it on a genuine anti-malware product that can remove Smart Fortress 2012, which should not, under normal circumstances, be removed by manual means that can risk damaging your PC.

Being Smarter Than Smart Fortress 2012's Fake Features

Smart Fortress 2012 is distributed via drive-by-download attacks and deceptive websites that may be identified by their own labels, such as Rogue:JS/Winwebsec. Smart Fortress 2012's presence also may be facilitated by Trojans or other PC threats that install Smart Fortress 2012 without your consent, and it's recommended that you scan your entire PC after you've found any signs of Smart Fortress 2012's existence. SpywareRemove.com malware researchers have noted that Smart Fortress 2012 can be recognized with ease due to its trademark System Tool clone appearance and other symptoms that are extremely visible such as:

  • Changes to your desktop wallpaper that replace it with a threatening message.
  • All non-essential programs being blocked, along with accompanying warning messages.
  • Fake alerts that come in a range of formats, including toolbar pop-ups and firewall warnings.

Samples of some of the dizzying array of Smart Fortress 2012's warning messages are shown below for reference:

Smart Fortress 2012 Warning
Your PC is infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid the theft of your credit card details.
Click here to activate protection.

Warning: Your computer is infected
Windows has detected spyware infection!
Click this message to install the last update of Windows security software...

Security Monitor: WARNING!
Attention: System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. Your private information and PC safety is at risk. To get rid of unwanted spyware and keep your computer safe you need to update your current security software.
CLick Yes to download official intrusion detection system (IDS software).

Smart Fortress 2012 Warning
Intercepting programs that may compromise your private and harm your system have been detected on your PC.
Click here to remove them immediately with System Tool.

Warning!
Application cannot be executed. The file cmd.exe is infected.
Please activate your antivirus software.

Breaking Out of Smart Fortress 2012's Software Fraud Scheme

Smart Fortress 2012's only goal is to badger you into spending money on its fake software, but buying Smart Fortress 2012 is utterly unnecessary to remove Smart Fortress 2012 (and its related problems) from your PC. SpywareRemove.com malware experts also recommend against trusting other rogue anti-malware applications from Smart Fortress 2012's family, which spans a wide range of fake brand names, such as Antivirus Security, System Security, AntiSpyware Pro 2009, Total Security, Total Security 2009, Security Tool, Trojan.RogueAV.a.gen, System Adware Scanner 2010, FakeAlert-KW.e, Advanced Security Tool 2010, System Tool 2011, MS Removal Tool, Antivirus Center, Security Shield, Personal Shield Pro, Advanced PC Shield 2012, Security Sphere 2012 and Futurro Antivirus.

Because Smart Fortress 2012 will try to shut down unrelated programs, including anti-malware programs that could safely delete Smart Fortress 2012, SpywareRemove.com malware analysts recommend that you use Safe Mode or similar alternatives to prevent Smart Fortress 2012 from being launched. Safe Mode can be accessed on most Windows computers by tapping F8 during the system boot but prior to the Windows loading screen. This will give you the environment that you need to remove Smart Fortress 2012 and other PC threats via system scans without being attacked.

Smart Fortress 2012 Screenshot 2Smart Fortress 2012 Screenshot 3Smart Fortress 2012 Screenshot 4Smart Fortress 2012 Screenshot 5Smart Fortress 2012 Screenshot 6Smart Fortress 2012 Screenshot 7Smart Fortress 2012 Screenshot 8

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Smart Fortress 2012 may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\Application Data\F4D55F3B000083BB000405A5D151FC4E\F4D55F3B000083BB000405A5D151FC4E.exe File name: F4D55F3B000083BB000405A5D151FC4E.exe
Size: 360.44 KB (360448 bytes)
MD5: 6379eba67e654d595ec2aeeb7c9c87be
Detection count: 22
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Application Data\F4D55F3B000083BB000405A5D151FC4E\
Group: Malware file
Last Updated: February 28, 2012
%UserProfile%\Application Data\[RANDOM DIGITS]\[RANDOM DIGITS].exe File name: %UserProfile%\Application Data\[RANDOM DIGITS]\[RANDOM DIGITS].exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%StartMenu%\Programs\Smart Fortress 2012.lnk File name: %StartMenu%\Programs\Smart Fortress 2012.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%CommonAppData%\[RANDOM 33 CHARACTERS] File name: %CommonAppData%\[RANDOM 33 CHARACTERS]
Group: Malware file
%CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS] File name: %CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS]
Group: Malware file
%CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS].exe File name: %CommonAppData%\[RANDOM 33 CHARACTERS]\[RANDOM 33 CHARACTERS].exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Registry Modifications


The following newly produced Registry Values are:

Directory%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Smart Fortress 2012%APPDATA%\Microsoft\Windows\Start Menu\Programs\Smart Fortress 2012HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Smart Fortress 2012File name without pathSmart Fortress 2012.lnkClsidHKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[RANDOM DIGITS]".exeHKEY_USERS\S-1-5-21-861567501-152049171-1708537768-1003_Classes\\shell\open\command "(Default)" = "%CommonAppData%\\.exe" -s "%1" %*HKEY_CURRENT_USER\Software\Classes\\shell\open\command "(Default)" = "%CommonAppData%\\.exe" -s "%1" %*HKEY_CLASSES_ROOT\HKEY_USERS\S-1-5-21-861567501-152049171-1708537768-1003_Classes\%s "(Default)" = ""

Additional Information

The following messages's were detected:
# Message
1Security Monitor: WARNING!
Attention! System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. Your private information and PC safety is at risk.
To get rid of unwanted spyware and keep your computer safe you need to update your current security software.
Click Yes to download official intrusion detection system (IDS software).
2Smart Fortress 2012 Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC.
Click here to remove them immediately with Smart Fortress 2012
3Warning!
Application cannot be executed. The file notepad.exe is infected.
Please activate your antivirus software.
4Warning: Your computer is infected
Detected spyware infection!
Click this message to install the last update of security software...
5Security Monitor: WARNING!
Attention! System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. Your private information and PC safety is at risk.
To get rid of unwanted spyware and keep your computer safe you need to update your current security software.
Click Yes to download official intrusion detection system (IDS software).
6Smart Fortress 2012 Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC.
Click here to remove them immediately with Smart Fortress 2012
7Warning!
Application cannot be executed. The file notepad.exe is infected.
Please activate your antivirus software.
8Warning: Your computer is infected
Detected spyware infection!
Click this message to install the last update of security software...

20 Comments

Leave a Reply

Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter. If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.