Read the same in:    English  Polski  Русский  

Virus Activity

Virus Activity

virus activity is normal



Rogue security software is a form of computer malware that deceives or misleads users into paying for the fake or simulated removal of malware. Rogue security software, in recent years, has become a growing and serious security threat in desktop computing. For your convenience in this section we gathered all known rogue security software in one list by alphabet.


 ID Article: 8473    Other languages:  Polski  Русский      Views for 7 days 22    Last modified on 2012 Apr 04 16:10 Printable version

1. Program description

SMART HDD (or S.M.A.R.T HDD) is a type of misleading application that pretends to be legitimate security software, such as an antivirus scanner or registry cleaner, but which actually provides the user with no protection (Rogue Security Software).

2. Actions

The program starts a misleading scan process. Once the scan is started SMART HDD generates and shows fake messages about viruses, trojans and worms detected on the computer. Still the detected viruses cannot be deleted unless the program license is purchased.

3. Files

During the installation SMART HDD copies the following files to the hard drive:

  • %AllUsersProfile%\Application Data\-ch1+6T~]V&zN,
  • %AllUsersProfile%\Application Data\-ch1+6T~]V&zN,r
  • %AllUsersProfile%\Application Data\ch1+6T~]V&zN,
  • %AllUsersProfile%\Application Data\ch1+6T~]V&zN,.exe
  • %AppData%\Microsoft\Internet Explorer\Quick Launch\SMART_HDD.lnk
  • %UserProfile%\Desktop\SMART_HDD.lnk
  • %UserProfile%\Desktop\SMART_HDD_License.txt
  • %UserProfile%\Start Menu\Programs\SMART HDD\
  • %UserProfile%\Start Menu\Programs\SMART HDD\SMART HDD.lnk
  • %UserProfile%\Start Menu\Programs\SMART HDD\Uninstall SMART HDD.lnk

4. System registry

In order to function normally AV Security 2012 creates the following branch in the system registry:

  • HKEY_CURRENT_USER|\Software\Microsoft\Windows\CurrentVersion\Run
    ch1+6T~]V&zN, = %AllUsersProfile%\Application Data\ch1+6T~]V&zN,.exe
  • HKEY_CURRENT_USER\software\Microsoft\Internet Explorer\Main\
    Use FormSuggest = Yes
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
    WarnOnZoneCrossing = 0×00000000
    WarnonBadCertRecving = 0×00000000
    CertificateRevocation = 0×00000000

5. Screenshots of the program

6. SMART HDD removal

Before uninstalling SMART HDD by OS Windows standard tools register the software using any email and the following serial number:



Useful references


 Did the provided info help you?


 Give your detailed feedback.


Kaspersky Lab

Copyright © 1997-2017 Kaspersky Lab
Site map  |   International Support Service  |  Send us a suspected file
Login CompanyAccount  |   Register  |   FAQ for CompanyAccount  |   Login Your Personal Cabinet

Stay connected