Accortding to S!Ri, Smart Fortress 2012 is a fake anti-spyware tool. It displays fake alert messages, prevent execution of legit programs and detects inexistent infections to scare users.
It is a clone of Smart Protection 2012, Personal Shield Pro.
To register (and help removal), copy paste this code: AA39754E-715219CE
The following urls were found:
http://78.159.105.142/api/stats/install/?&affid=46701&ver=3030002&group=sp
http://95.168.172.86/p/?&aid=test&lid=3030002&affid=46701&nid=9025E786&group=sf
http://95.168.172.86/p/gr/?lid=3030002&group=sf&nid=9025E786&s=3&affid=46701&aid=test
http://95.168.172.86/p/?&aid=test&lid=3030002&affid=46701&nid=9025E786&group=sf
http://95.168.172.86/p/gr/?lid=3030002&group=sf&nid=9025E786&s=3&affid=46701&aid=test
95.168.172.86 was also used by Win32/Rovnix
Here, one again serving FakeAV:
Also on my star-stat.com post, someone have do a weird comment claiming to have the source code of this type of FakeAV.
Hey Steven Thanks for the info on this fake AV. The last thing you posted is that someone said they claimed to have the source code to a FakeAV. Is there anymore information you can find about this? Source code for this can help a lot to fight these kind of infections.
ReplyDelete