Smart Internet Protection 2011

Posted: January 28, 2011

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	10/10
Infected PCs:	724

First Seen:	January 31, 2011
Last Seen:	May 27, 2023
OS(es) Affected:	Windows

Smart Internet Protection 2011 is an updated version of the rogue program Personal Internet Security 2011. As a rogue scanner, Smart Internet Protection 2011 does its best to fake the superficial elements of useful anti-malware software, but this is just a false front. All of Smart Internet Protection 2011's scans, error messages, and other communications and visible activities are full of false information meant to defraud you of both your money and your personal information. Substantial damage may occur to your computer if you allow Smart Internet Protection 2011 to remain unhindered, which makes Smart Internet Protection 2011 an important target for speedy deletion.

Surveying the Foul Nature of Smart Internet Protection 20

In recent times, malware creators have shifted to the tactic of putting a new name and face on old malicious code, and Smart Internet Protection 2011 is just one example of that in action. Rogue software like Smart Internet Protection 2011 will usually infect computers in an undercover fashion. This may be either by spreading through Trojans or by tricking the user into installing the supposedly helpful program. Smart Internet Protection 2011, like every rogue scanner, thrives on presenting constant warnings of system damage that are false statements to secure the contents of your wallet.

Based on infection records and similarities to other rogue products, Smart Internet Protection 2011 likely comes from Russia. Avoiding contact with Russian-based file sources may help you keep your system uninfected, but as always, the best protection is a reliable and well-known security program that constantly patrols your system for potential threats.

You'll know very quickly if you have a Smart Internet Protection 2011 infection on your machine, since Smart Internet Protection 2011 will create an icon for itself, display its presence proudly in other ways, and generally be a nuisance. You'll be rapidly assaulted with a series of error messages, fake results that detect dozens of infections, and other forms of communication intended to alarm you. You needn't worry about these supposed errors or infections, since Smart Internet Protection 2011 will report them all the time just to get you to buy into Smart Internet Protection 2011's scam.

Be especially careful not to travel to Smart Internet Protection 2011's fraudulent website by accident when dealing with this behavior, since many error messages Smart Internet Protection 2011 causes may contain malicious links. Smart Internet Protection 2011's prolonged presence has also been reported to cause serious instability in infected systems. Smart Internet Protection 2011 may even make running important programs like Task Manager impossible when not booted into Safe Mode.

Smart Internet Protection 2011 is Trickier to Remove than Most, But Not Impossible

Smart Internet Protection 2011 may disable many of the programs you would ordinarily use to remove rogue scanners like it. Some actual security software products have even been reported to be unable to detect Smart Internet Protection 2011 at all. Downloading updates for your security software as soon as it's available may drastically reduce the chances of such a calamitous event, although there are still no guarantees that removing Smart Internet Protection 2011 will be easy.

Manual removal may be necessary in some cases, but one should generally attempt an anti-malware scanner-based removal of Smart Internet Protection 2011 first. You're more likely to suffer from an incomplete deletion if you attempt to remove Smart Internet Protection one file at a time yourself. This can allow Smart Internet Protection 2011 or other malware to remain on your computer and get back to causing trouble.

Besides general anti-malware software, there are also more specific programs that target Smart Internet Protection 2011 and similar rogue scanners more particularly, and these may be a good choice if other efforts have failed. You should also be aware that some users have reported a disabled Internet connection immediately after deleting Smart Internet Protection 2011. These settings can usually be returned to normal if one is simply willing to go to the Internet Settings interface in the Control Panel.

Aliases

Dropper.Small.XNH [AVG]Trojan.KillProc.14401 [DrWeb]Gen:Variant.MSILDrop.8 [BitDefender]HEUR:Trojan.Win32.Generic [Kaspersky]PSW.Generic9.CNVE [AVG]W32/Banker.YAT!tr.spy [Fortinet]TR/Agent.AOOI [AntiVir]Trojan.Generic.KDV.657800 [BitDefender]Trojan-Spy.Win32.Farko.lu [Kaspersky]Win32:Agent-AOOI [Trj] [Avast]Win32/Spy.Banker.YAT [NOD32]Artemis!20116B0960CE [McAfee]Rootkit [Ikarus]ADSPY/AdSpy.Gen2 [AntiVir]Gen:Adware.Heur.ov8@Wrr8Hjfi [BitDefender]
More aliases (228)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

C:\Users\<username>\Desktop\game\Star Defender IV 1.0\StarDefender4.exe

File name: StarDefender4.exe
Size: 2.16 MB (2162176 bytes)
MD5: 590b3fa789fbc013b2ff78d0b9cc9c10
Detection count: 215
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\Desktop\game\Star Defender IV 1.0\StarDefender4.exe
Group: Malware file
Last Updated: June 9, 2023

%USERPROFILE%\Bureau\softupdate106_231.exe

File name: softupdate106_231.exe
Size: 332.28 KB (332288 bytes)
MD5: 658cc108705e6c1ce176b0563a14b720
Detection count: 96
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Bureau
Group: Malware file
Last Updated: February 1, 2011

%WINDIR%\system32\nsv19B.dll

File name: nsv19B.dll
Size: 1.29 MB (1290752 bytes)
MD5: 5577299e08dc943b7357bbf1d365fe9c
Detection count: 61
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: February 2, 2011

%USERPROFILE%\Bureau\RogueKiller.exe

File name: RogueKiller.exe
Size: 1.19 MB (1199626 bytes)
MD5: 8066b79c33cb423e98686bc0b2cf511e
Detection count: 33
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Bureau
Group: Malware file
Last Updated: February 1, 2011

C:\Users\<username>\AppData\Roaming\pure.exe

File name: pure.exe
Size: 12.28 KB (12288 bytes)
MD5: bb5b2961567e68995464801d3bb2a964
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\pure.exe
Group: Malware file
Last Updated: February 10, 2022

%ALLUSERSPROFILE%\Application Data\6469a8\SI646_289.exe

File name: SI646_289.exe
Size: 3.69 MB (3691520 bytes)
MD5: aefd0f1d18dba89bda1cdfae8e72f547
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Application Data\6469a8
Group: Malware file
Last Updated: January 31, 2011

%TEMP%\WSZugo.exe

File name: WSZugo.exe
Size: 143.36 KB (143360 bytes)
MD5: 5959303fcecbd9cc3038ee98bebee5a1
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: February 1, 2011

c:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\acleaner.exe

File name: acleaner.exe
Size: 45.05 KB (45056 bytes)
MD5: 83c7581549a57b1bab3816a687398682
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: c:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013
Group: Malware file
Last Updated: February 1, 2011

%APPDATA%\vfbu.exe

File name: vfbu.exe
Size: 1.48 MB (1486848 bytes)
MD5: 5c48d25eb124b48ebc260684c3fe41cb
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: February 1, 2011

%TEMP%\Adobe\AdobeMngPlug.dll

File name: AdobeMngPlug.dll
Size: 42.49 KB (42496 bytes)
MD5: 84ea6bea611fe1e55c215d158fb63ede
Detection count: 14
File type: Dynamic link library
Mime Type: unknown/dll
Path: %TEMP%\Adobe
Group: Malware file
Last Updated: February 1, 2011

%WINDIR%\system32\AcroIEHelpe146.dll

File name: AcroIEHelpe146.dll
Size: 185.31 KB (185312 bytes)
MD5: 20116b0960ce90e7a746be85fb149770
Detection count: 14
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: July 20, 2012

%ALLUSERSPROFILE%\Application Data\306b58\SI306_231.exe

File name: SI306_231.exe
Size: 5.16 MB (5165056 bytes)
MD5: 87996fd3d2627933b343044518828ec0
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Application Data\306b58
Group: Malware file
Last Updated: January 31, 2011

%ALLUSERSPROFILE%\Application Data\6c2cb4\SI6c2_289.exe

File name: SI6c2_289.exe
Size: 5.34 MB (5344256 bytes)
MD5: d6d6af86e8d76ef748e554f331ad1b16
Detection count: 10
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Application Data\6c2cb4
Group: Malware file
Last Updated: February 1, 2011

%PROGRAMFILES%\FullEkran\Full Ekran\FullEkran.exe

File name: FullEkran.exe
Size: 484.35 KB (484352 bytes)
MD5: e4d3145cf158bdda827eb50a0b4194c1
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\FullEkran\Full Ekran
Group: Malware file
Last Updated: February 1, 2011

%TEMP%\tmp89d062d9\killexe.exe

File name: killexe.exe
Size: 256 KB (256000 bytes)
MD5: ea621efb4e3e2e44cd326798df9639ff
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\tmp89d062d9
Group: Malware file
Last Updated: February 1, 2011

%TEMP%\sssd.exe

File name: sssd.exe
Size: 24.57 KB (24576 bytes)
MD5: 305d06dd766625abdb1fbd0aab43bae1
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: February 1, 2011

%WINDIR%\System32\wsynalib.exe

File name: wsynalib.exe
Size: 35.32 KB (35328 bytes)
MD5: f4f2740bc874bf24456c444e3afe0332
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\System32
Group: Malware file
Last Updated: February 1, 2011

%PROGRAMFILES%\Yahoo!\Boom\YBoom.exe

File name: YBoom.exe
Size: 466.94 KB (466944 bytes)
MD5: 567034ff12ae544fd08b905dd2c7d3ed
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Yahoo!\Boom
Group: Malware file
Last Updated: February 1, 2011

%TEMP%\WSZugo.exe

File name: WSZugo.exe
Size: 143.36 KB (143360 bytes)
MD5: 0aa9427c656ef2d6ea0550b3096984a8
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: February 1, 2011

%USERPROFILE%\vloadb5C.dll

File name: vloadb5C.dll
Size: 610.3 KB (610304 bytes)
MD5: 01de294d6b120b84187cf2be0cf2fd29
Detection count: 3
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%
Group: Malware file
Last Updated: February 1, 2011

11 Comments

haroon says:

February 2, 2011 at 9:02 am

Smart Internet Protection 2011 remove all please
Jose Aguilar says:

February 6, 2011 at 11:32 am

PLEASE REMOVE THIS PROGRAM, BECAUSE I DONT WANT.
terry barnes says:

February 11, 2011 at 9:54 am

CANT GET RID OF SMART INTERNETPROTECTION 2011 PLEASE HELP
Saba says:

February 11, 2011 at 10:12 am

Please remove Smart Internet Protection Program, because I do not want
Saba says:

February 11, 2011 at 10:50 am

Smart Internet Protection 2011 remove all please.
Please remove smart internet protection 2011 program from my computer.
charles squires says:

February 11, 2011 at 11:29 pm

please remove this smart internet form my puter. i an\'t got sence enough to do it

thank you very much
Joy says:

February 12, 2011 at 2:12 am

Hi. The virus files seem to have different names now. Look for "SIP" files, instead of "smart internet protection." I found it helpful to just look through windows explorer to see whether any new program was installed or files have been modified. Make sure you check all hidden folders. This program unload dosens of files at one time. In the windows explore, I could find dozens of new files all unloaded at about the same time.
john langum says:

February 12, 2011 at 6:01 pm

please remove smart internet protection 2011 program from my computer
Chau Nguyen says:

February 16, 2011 at 1:06 pm

I did try to get rid of it but I could not, So, please help me out for this.
cardom44@aol.com says:

March 14, 2011 at 12:54 pm

PLEASE TELL ME HOW TO REMOVE THE SMART INTERNET PROTECTION
Chara says:

March 27, 2012 at 11:45 am

Anyone identify the administrator of the AV Security Suite "purchase" site?