AV Security 2012 is a trickily designed malware which evidently seeks easy money. By making users believe that they are dangerously infected with viruses, this scamware creates a need of removal tool and additionally starts offering to purchase its licensed version. However, as you may have guessed, the licensed AV Security 2012 version is useless thing that is offered for swindling the money. Keep in mind that this program is malicious and released by cyber criminals for generating money only.
AV Security 2012 hails from the fakeScanti family which shares the same GUI with System Security 2012 or System Security 2011. In addition, the way how they all are distributed also stays the same – after forgetting to update anti-malware program, user unnoticeable lets AV Security 2012 to come through security vulnerabilities found. Keep in mind that you can get this malware together with infected downloads or fake updates downloaded from non-official websites. To launch once PC is rebooted, AV Security 2012 additionally creates some new Registry keys and drops bad files on the Program Files and System32 directories. All those modifications will probably pass by your attention, but you will definitely notice its upcoming activity.
To make its victims believe that PC is infected, AV Security 2012 floods the desktop with faked alerts reporting something like that:
Windows Security Alert
To help protect your computer, Windows Firewall has blocked some features of this program.
Do you want to keep blocking this program?
Name: Zeus Trojan
Warning! Infection found
Unauthorized sending E-MAIL with subject “RE:” to was CANCELLED.
Warning! Infection found
Unwanted software (malware) or tracking cookies have been found during last scan. It is highly recommended to remove it from your computer.
Keylogger Zeus was detected and put in quarantine.
Keylogger Zeus is a very dangerous software used by criminals to steal personal data such as credit card information, access to banking accounts, passwords to social networks and e-mails.
Your computer continues to be infected with harmful viruses. In order to prevent permanent loss of your information and credit card data theft please activate your antivirus software. Click here to enable protection.
Malicious programs that may steal your private information and prevent your system from working properly are detected on your computer.
Click here to clean your PC immediately.
Keep in mind that all those alerts are displayed for the only reason - to scare people into purchasing the license of AV Security 2012. It is highly recommended to avoid doing this because you may lose credit card details and get more viruses installed. To fix your computer, you must remove AV Security 2012, otherwise it will keep redirecting to its payment page that will continuously recommend you register the full version.
AV Security 2012 manual removal
[random characters].exe, launching from C:\Windows\System32
AV Security 2012v121.exe
Delete registry values:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:59232
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random characters]"
HKEY_CURRENT_USER\Software\System Security 2011
%UserProfile%\Desktop\System Security 2012.lnk
Geolocation of AV Security 2012
Comments on AV Security 2012
Post a comment
Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.