1. Program description
SMART HDD (or S.M.A.R.T HDD) is a type of misleading application that pretends to be legitimate security software, such as an antivirus scanner or registry cleaner, but which actually provides the user with no protection (Rogue Security Software).
2. Actions
The program starts a misleading scan process. Once the scan is started SMART HDD generates and shows fake messages about viruses, trojans and worms detected on the computer. Still the detected viruses cannot be deleted unless the program license is purchased.
3. Files
During the installation SMART HDD copies the following files to the hard drive:
- %AllUsersProfile%\Application Data\-ch1+6T~]V&zN,
- %AllUsersProfile%\Application Data\-ch1+6T~]V&zN,r
- %AllUsersProfile%\Application Data\ch1+6T~]V&zN,
- %AllUsersProfile%\Application Data\ch1+6T~]V&zN,.exe
- %AppData%\Microsoft\Internet Explorer\Quick Launch\SMART_HDD.lnk
- %UserProfile%\Desktop\SMART_HDD.lnk
- %UserProfile%\Desktop\SMART_HDD_License.txt
- %UserProfile%\Start Menu\Programs\SMART HDD\
- %UserProfile%\Start Menu\Programs\SMART HDD\SMART HDD.lnk
- %UserProfile%\Start Menu\Programs\SMART HDD\Uninstall SMART HDD.lnk
4. System registry
In order to function normally AV Security 2012 creates the following branch in the system registry:
- HKEY_CURRENT_USER|\Software\Microsoft\Windows\CurrentVersion\Run
ch1+6T~]V&zN, = %AllUsersProfile%\Application Data\ch1+6T~]V&zN,.exe
- HKEY_CURRENT_USER\software\Microsoft\Internet Explorer\Main\
Use FormSuggest = Yes
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
WarnOnZoneCrossing = 0×00000000
WarnonBadCertRecving = 0×00000000
CertificateRevocation = 0×00000000
5. Screenshots of the program
6. SMART HDD removal
Before uninstalling SMART HDD by OS Windows standard tools register the software using any email and the following serial number:
15801587234612645205224631045976
|
21 
2012 Apr 04 16:10
