Wednesday 29 February 2012

Smart Fortress 2012



Accortding to S!Ri, Smart Fortress 2012 is a fake anti-spyware tool. It displays fake alert messages, prevent execution of legit programs and detects inexistent infections to scare users.
It is a clone of Smart Protection 2012, Personal Shield Pro.


To register (and help removal), copy paste this code: AA39754E-715219CE


The following urls were found:
http://78.159.105.142/api/stats/install/?&affid=46701&ver=3030002&group=sp
http://95.168.172.86/p/?&aid=test&lid=3030002&affid=46701&nid=9025E786&group=sf
http://95.168.172.86/p/gr/?lid=3030002&group=sf&nid=9025E786&s=3&affid=46701&aid=test

95.168.172.86 was also used by Win32/Rovnix
 Here, one again serving FakeAV:

Also on my star-stat.com post, someone have do a weird comment claiming to have the source code of this type of FakeAV.

1 comment:

  1. Hey Steven Thanks for the info on this fake AV. The last thing you posted is that someone said they claimed to have the source code to a FakeAV. Is there anymore information you can find about this? Source code for this can help a lot to fight these kind of infections.

    ReplyDelete