14 DAY TRIAL // Experts from Avast have come across a tool called S.M.A.R.T Repair, which allegedly fixes hard drive errors. In reality, it’s nothing but a piece of scareware that tries to fool unsuspecting users into paying for a license that magically makes the errors disappear.
Researchers have analyzed the shady app and found that it’s cleverly programmed to bug the victim with the so-called errors until he/she purchases an activation key and enters it into the registration form.
If it’s not activated, the fake repair software, identified as Win32:FakeSysdef, doesn’t even allow the user to close it. The X in the upper right corner only minimizes the application and an Exit option is inexistent.
Once the license is purchased, inserted into the registration field, and the computer is restarted, SMART Repair fixes all the bugs.
So let’s take a look at what actually happens in the background.
When it’s first executed, the program is removed from the initial location and copies itself to the Documents and Settings folder as an executable file with a randomly generated name.
After debugging the application, experts have found that the cybercriminals haven’t even bothered to create individual activation codes. There is one numeric string that’s provided to all the users who fall for the scam and actually pay the amount of money requested for the license.
The code is 08869246386344953972969146034087. This may come in handy to those who’ve already fallen for the trap and can’t get rid of the pesky warning.
Further analysis has revealed that the websites from which the keys can be purchased are hosted on a server located in the United Arab Emirates and which belongs to a Russian ISP. Ironically, the registrar of the domains is BIZCN.com, a Chinese company that specializes in fraudulent activities.