S.M.A.R.T. Data Recovery

By | August 16, 2012 | 0 Comment

S.M.A.R.T. Data Recovery is a serious threat that its presence may lead to Windows destruction. As part of its deceiving act, it offers two functions such as S.M.A.R.T. Check and S.M.A.R.T. Repair. In general, none of these features serves a purpose. It is a rogue program so never expect that it will be a useful product. In fact, this fake utility was developed in a method that all it want is to extract money from victims. S.M.A.R.T. Data Recovery is using a scare tactics where in it will show you forged security alerts and simulated scan results. This malware will identify a number of problems such as hard drive errors and memory problems. Then, it advises instant fix by paying for the registered version of S.M.A.R.T. Data Recovery.

Since the day it was released, security experts already warned Internet users to keep away from this malware, not only due to its harmful effect, but also because of its mischief intention. Online extortion is the game of S.M.A.R.T. Data Recovery. If it can’t force you to buy the program, then it will resort to stealing of your sensitive data like user name, password, and credit card records. There is no way you can win with S.M.A.R.T. Data Recovery if you play its own game. Thus, we highly recommend instant removal for this malware. Below, we prepared a simple yet effective procedure to uninstall S.M.A.R.T. Data Recovery from an infected computer.

Type Rogue
Sub-Type FakeAV
OS Affected Windows

What are the Symptoms of S.M.A.R.T. Data Recovery Infection?

Seeing this following scanner on your desktop indicates that your computer is infected with S.M.A.R.T. Data Recovery. As you can observe it possesses two consoles and both will play simulated scans.

S.M.A.R.T. Check – Scan raw tables of S.M.A.R.T. attributes for in-depth diagnostics.

Smart Check Scanner

S.M.A.R.T. Repair – Fix issues reported during the in-depth diagnostics of S.M.A.R.T. attributes.

Smart Repair Scanner

It will modify Windows Registry and add the following entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “(random) .exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “(random).exe”

The threat will drop the following malicious files:
%LocalAppData%\(random).exe
%StartMenu%\Programs\Data Recovery\Data Recovery.lnk
%StartMenu%\Programs\Data Recovery\Uninstall Data Recovery.lnk
%Temp%\smtmp\
%UserProfile%\Desktop\Data Recovery.lnk

Leave a Reply

Your email address will not be published. Required fields are marked *