Accortding to S!Ri, Smart Fortress 2012 is a fake anti-spyware tool. It displays fake alert messages, prevent execution of legit programs and detects inexistent infections to scare users.
It is a clone of Smart Protection 2012, Personal Shield Pro.
To register (and help removal), copy paste this code: AA39754E-715219CE
The following urls were found:
http://78.159.105.142/api/stats/install/?&affid=46701&ver=3030002&group=sp
http://95.168.172.86/p/?&aid=test&lid=3030002&affid=46701&nid=9025E786&group=sf
http://95.168.172.86/p/gr/?lid=3030002&group=sf&nid=9025E786&s=3&affid=46701&aid=test
http://95.168.172.86/p/?&aid=test&lid=3030002&affid=46701&nid=9025E786&group=sf
http://95.168.172.86/p/gr/?lid=3030002&group=sf&nid=9025E786&s=3&affid=46701&aid=test
95.168.172.86 was also used by Win32/Rovnix
Here, one again serving FakeAV:
Also on my star-stat.com post, someone have do a weird comment claiming to have the source code of this type of FakeAV.
