Emsisoft Malware-Info
Name: Adware.Win32.SmartSecurity2
Risklevel: High Risk
Description:
Smart Security is a rogue security software that show false warning messages and show misleading scan results, this is another variant from My Security Shield, Security Master AV, My Security Engine, or CleanUP Antivirus. It will start automatically when your computer starts. The installer will also create numerous harmless files on your computer, usually at Recent folder, that are used to impersonate malware files. Once the program is running it will scan your computer and then display these files as infections, but will not allow you to remove them until you purchase the program.
Removal instructions for Adware SmartSecurity2:
To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware SmartSecurity2.
Run a full scan on all drives and move all detected items to the quarantine.
More details about this danger:
Characteristics:
- Shows misleading scan results.
- Shows fake warning messages.
- Shows fake security alerts.
Installation: Installed through EXE
Process: %random%.exe
Screenshots:
Used folders:
- C:\Windows\System32\drivers\etc\
- C:\Documents and Settings\All Users\Application Data\a14a77\
- C:\Documents and Settings\All Users\Application Data\SMHBS\
- C:\Documents and Settings\[USER]\Application Data\Smart Security\
- C:\Documents and Settings\[USER]\Local Settings\Temp\
- C:\Documents and Settings\All Users\Application Data\a14a77\SMSSys\
- C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\
- C:\Documents and Settings\[USER]\Desktop\
- C:\Documents and Settings\[USER]\Recent\
- C:\Documents and Settings\[USER]\Start Menu\
- C:\Documents and Settings\[USER]\Start Menu\Programs\
Used files:
- C:\Documents and Settings\All Users\Application Data\a14a77\3481.mof
[326 Bytes] MOF File - C:\Documents and Settings\All Users\Application Data\a14a77\mozcrt19.dll
[718296 Bytes] DLL File - C:\Documents and Settings\All Users\Application Data\a14a77\SMS.ico
[4286 Bytes] ICO File - C:\Documents and Settings\All Users\Application Data\a14a77\SMSSys\fgq234.gf
[12336 Bytes] GF File - C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\Smart Security.lnk
[1820 Bytes] LNK File - C:\Documents and Settings\[USER]\Application Data\Smart Security\Instructions.ini
[1309 Bytes] INI File - C:\Documents and Settings\[USER]\Local Settings\Temp\4e7ec72808d424cecd4c4863a6729fbb_bfbf706b816841c845e6ec28f9069dacc59b2d6d.exe
[257024 Bytes] EXE File - C:\Documents and Settings\[USER]\Recent\cb.dll
[58 Bytes] DLL File - C:\Documents and Settings\[USER]\Recent\CLSV.drv
[66 Bytes] DRV File - C:\Documents and Settings\[USER]\Recent\energy.tmp
[38 Bytes] TMP File - C:\Documents and Settings\[USER]\Recent\PE.drv
[28 Bytes] DRV File - C:\Documents and Settings\[USER]\Recent\ppal.dll
[45 Bytes] DLL File - C:\Documents and Settings\[USER]\Recent\runddlkey.sys
[16 Bytes] SYS File - C:\Documents and Settings\[USER]\Recent\SM.exe
[56 Bytes] EXE File - C:\Documents and Settings\[USER]\Recent\tjd.tmp
[1 Bytes] TMP File - C:\Documents and Settings\[USER]\Start Menu\Programs\Smart Security.lnk
[1808 Bytes] LNK File - C:\Documents and Settings\All Users\Application Data\a14a77\lttxeexluxjee.ini
[75 Bytes] INI File - C:\Documents and Settings\All Users\Application Data\a14a77\SMa14_2129.exe
[4178944 Bytes] EXE File - C:\Documents and Settings\All Users\Application Data\a14a77\sqlite3.dll
[458200 Bytes] DLL File - C:\Documents and Settings\All Users\Application Data\SMHBS\SMNPTAXJS.cfg
[18171 Bytes] CFG File - C:\Documents and Settings\[USER]\Application Data\Smart Security\cookies.sqlite
[2048 Bytes] SQLITE File - C:\Documents and Settings\[USER]\Desktop\Smart Security.lnk
[1820 Bytes] LNK File - C:\Documents and Settings\[USER]\Recent\ANTIGEN.sys
[60 Bytes] SYS File - C:\Documents and Settings\[USER]\Recent\CLSV.dll
[72 Bytes] DLL File - C:\Documents and Settings\[USER]\Recent\eb.tmp
[2 Bytes] TMP File - C:\Documents and Settings\[USER]\Recent\exec.drv
[52 Bytes] DRV File - C:\Documents and Settings\[USER]\Recent\PE.sys
[37 Bytes] SYS File - C:\Documents and Settings\[USER]\Recent\ppal.drv
[37 Bytes] DRV File - C:\Documents and Settings\[USER]\Recent\sld.sys
[59 Bytes] SYS File - C:\Documents and Settings\[USER]\Recent\snl2w.sys
[13 Bytes] SYS File - C:\Documents and Settings\[USER]\Start Menu\Smart Security.lnk
[1802 Bytes] LNK File - C:\Windows\System32\drivers\etc\hosts
[2768 Bytes] File
Additional information might be found here:
Search
at Google for
Adware SmartSecurity2
Search at Bing for
Adware SmartSecurity2
Search
at Yahoo for
Adware SmartSecurity2
How can I protect myself from Adware SmartSecurity2?
Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers.
This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.
Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!
Only $40 for the security of your computer.
Buy Emsisoft Anti-Malware online:
Trust only on the best protection software!
Spring Offer!
Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get
a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.
Only a few days left! Order here

























