AntiSpy Safeguard
Posted: August 24, 2010
Threat Metric
The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to
give every identifiable malware threat. Our Threat Meter includes several criteria based off of
specific malware threats to value their severity, reach and volume. The Threat Meter is able to give
you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count,
Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic
breakdown of how all threats are ranked within our own extensive malware database. The scoring for
each specific malware threat can be easily compared to other emerging threats to draw a contrast in
its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to
remove a threat or pursue additional analytical research for all types of computer users.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
| Threat Level: | 10/10 |
|---|---|
| Infected PCs: | 8,549 |
| First Seen: | September 6, 2010 |
|---|---|
| Last Seen: | August 17, 2022 |
| OS(es) Affected: | Windows |
AntiSpy Safeguard aka AntiSpySafeguard is a fake anti-spyware program. AntiSpy Safeguard typically spreads via Trojans and it can also be obtained from malicious websites. AntiSpy Safeguard uses scare tactics to coerce users into purchasing its non-existent full version. AntiSpy Safeguard will display fake scan reports and security alerts to convince a victim that his/her system is infected and the only solution is to purchase its full version. Do not fall for this trickery. AntiSpy Safeguard is a useless application that should never be purchased.
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 064896bcac9709c62fe30b5c81bd1bd7
Detection count: 66
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 1c9286253d8347f7e5671381be69238e
Detection count: 56
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 591a8f476cdbc3eaf274edb1cadfc8b0
Detection count: 56
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 22, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: cec3bb262eb876f8eef3613a63086354
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 287e736d149ca8faadb401284cbb1a8d
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 66274b61f50117c874258a6dab559846
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: a45e770fa5d8743364f6d28019d0718e
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 12ea7f7057f2430510efdda2e83eeb5d
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: eae9e0b7455793789924244cc61a4cee
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 1b3275d130227cfc273eebe96272ee89
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 31cb5261df2a549f7c9d4f3afe2612a1
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: aa6b094fc4db4a0dd143db52793b0462
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 22, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 3b65097af299b8b18ef18a77abd327ee
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 9305e17ad2d201eed1b77040e9ca1ec3
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 23, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 2ef507d90ddddd1c390c89a27bb89db8
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 89e68e42d6515ce022174815af8340cc
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 20, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 7f786e3557a762997e236ba23aa2df08
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 22, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 97180de1787c01ce00a00ee0f372d891
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 22, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 99536f70b497fbfbbda48558d600adbd
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 23, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 98f8392f6c9cc2196e2d733ea97570f4
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 22, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 595fda91df3014bac0c309e79caf9cb5
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 22, 2010
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 7f00e69cd9b1c5b03626a5707ac04286
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 22, 2010
More files
Additional Information
The following messages's were detected:
| # | Message |
|---|---|
| 1 | "Warning! Database updated failed!
Database update failed! Outdated viruses database are not effective can???t guarantee adequate protection and security for your PC! Click here to get the full version of the product and update the database!" "Warning! Running trial version! The security of your computer has been compromised! Now running trial version of the software! Click here to purchase the full version of the software and get full protection for your PC!" |
I had trouble removing it your way. That program prevented me from opening my task manager, so I found an easier way to erase it completely by one button. I\'ll explain:
I opened my control panel and went under startup programs. I changed the tab to \"currently running programs\" and scrolled down. I found this Antispy Safeguard bullsh*t and clicked remove. Now everything it has prevented me from doing I am now able to have access to and I have not found any trace of a rogue program on my PC as of today. I just figured you would like to use this as an alternate way to erase this program in case anyone else is experiencing the same difficulties as I was.
michael i tried your way but it doent say remove i can just end the process and it will work but then if i restart or turn of the computer the AntiSpy Safeguard stills there and it does the same thing... it scans and doesnt let me go to internet =(
Thank you so much Michael. I came across the same problem and could not access my task manager. Your cmment helped a lot. Thank you again.
ran into same problem as Michael-could not open task master but my computer -Dell-must be older as Ido not have "startup programs". Any advice? Harrington
Thanks Mike,
Anybody having this problem, Michaels way worked for me as well.
I had this virus with Vista Home Premium OS. I had to go to adminstrative tools to show programs running. I deleted the operation and then found the downloaded files \"Free Movies\" publisher Mouskit AG which matched the name of the company of the program I had stopped. I cleared out my recylce bin to completely remove the software. I had tried to delete from the programs unistall and the install log file could not be found. My internet explorer programs are working again so the software seems to be gone. I\'ll know when I restart my computer.
ON ANOTHER COMPUTER THE ANTISPY SAFEGUARD WILL NOT LET ME CONNECT TO THE INTERNET VIA EXPLORER TO DOWN LOAD ANY PROGRAMS TO GET RID OF ANTISPY SAFEGUQARD. WHAT CAN I DO ?????????
THANKS DENNIS
I totally agree with Michael above. I was previously having the same trouble with not even being able to open task manager, but by following his method (which not only got rid of the virus, but did so far quicker than the method this website is suggesting would have) my laptop is running just as it was before. Thank you Michael for this information which proved hugely helpful to me! I would advise anyone to follow his lead and try this method first due to its speed and simplicity.
Michael,
I have the same problem. So I opened the control panel (Windows XP) . I did not find "Startup Programs" in control panel. Can you tell me where I can find startup program under control panel.
Nick
I have windows XP and I went to control panel. I did not find Startup program in the control panel. Please tell me how can I find start up program in control panel. I need to get rid of this Antispy Safeguard.
Nick
Microsoft should see to it that the Antispy Safeguard are prosecuted to the fulest extent of the law. Then fine the living hell out of them.
These guys are crooks, pure & simple.
It is beyond nt conprehension why Microsoft doesn't get on this immediately and put an end to it. These guys are very bad for Microsofts reputation.
noel wedder
I can\'t get to my Task Manager - When I go to my Control Panel > Change Startup Programs, I get a message that Windows Defender is turned off but the link to turn it back on just gives me an error message. I can\'t get online on my PC with the AntiSpySafeguard stops me from going any further - so I tried downloading SpyHunter removal software on my Mac - hoping to save it on my flash drive & able to run it on the PC - but it only went as far as 281 kb and got stuck... Any suggestions? Please.
it wont let me start task manager . i found the file but it wont let me delete it
It wouldn't let me start task manager due to the warning appearing and it wouldnt let me go on the internet sa i cant download any program against it.
i watched a video on youtube saying how to find it on your pc and i found it under the name ''hotfix'' but it wouldnt let me delete it .
Dear Michael,
I am experiencing the same problem.
I understand what you did,
I am using windows 7 (dutch)
When I right click on the startbutton I can change some settings, But there is no tab currently running programms
Thx for your answer
John
I don't find startup programs in the Control Panel. What am I doing wrong?
Thanks for your help.
Michael you are a genius and u saved my computer thank you so much
That is nice that it worked for you, but in XP, you can\'t get to startup programs from control panel, so for those users your explanation is useless.
I tried task manager but it blocks it i also tried control panel but do not see the start up progarams tab i have windows 7 may be it different can any one give me any sudjestions
thank you
Hiii
im having major probs with this AntiSpySafeuard 🙁 it conned me into thinking i had major viruses... thing is its on my mums laptop and she doesnt know cuz she will freak!
it keeps comin up saying 'safe start up' thats the only option you can click on, when i do, it says its performin a scan but when its finished it stays on the screen, even after you've removed it, the task bar or anythin doesnt come up so i cant do anythin! its drivin me mad, can anyone help?
Thanks to michael, i got it fixed. Been trying to get it to work for the longest time 🙂
Can you please help me. I can't find where you would change the tab to running programs in the control panel.
Thanks
Michael: Thank you, thank you, thank you. I looked at four websites with complicated explanations or software downloads for purchase. Your method worked... so easy.
After I ended the process under the "currently running programs" tab as you described, I was able to delete:
"user"\AppData\Roaming\hotfix.exe
"user"\AppData\Roaming\srsf.bat
"user"\AppData\Local\Temp\0.9236036790384962.exe
"user"\Desktop\mstsc.exe
All of these files were generated at the same exact time.
I rebooted in safemode, started "run", "Open: regedit" and deleted:
HKEY_CURRENT_USER\Softwre\Microsoft\WindowsNT\CurrentVersion\Winlogin "Shell" = "User"\Application Data\hotfix.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings"WarnOnPostRedirect"="0"
and "WarnonBadCertRecving"="0"
None of the other registers existed.
I rebooted in normal mode and all was solved.
Thanks again and also to this site.
ANTI SPY SAFEGUARD IS A SCAM. HAD A MICROSOFT WINDOW ADVISING I HAD A VIRUS. WANTED ME TO PAY 99.00 BY CREDIT CARD TO REMOVE. LOCKED MY INTERNET, TASK MANAGER, SYSTEM RESTORE. I HAD TO GET 9 TECHS FROMCYBER DEFENDER TECH SUOOORT 5 HOURS, TO FINALLY REMOVE.
Michael, can u please explain how you got to the "currently running programs" tab?
I can't open even my PC....when I opened it,, this spyware is running and I can't stop the process! I am trying to click the "continue unprotected" after it scanned the whole thing but I am left with a box saying: Personalized setting c:\windows\system32\winservice.exe
how i am suppose to have my pc running and remove it?? please help. thanks.
Dears,
I have stopped the AntiSpySafeguard by doing this:
1. Start - Run -> Browse to C:\WINDOWS\Regidit
2. Open the map: HKEY_CURRENT_USERS\Software\Microsoft\Windows\CurrentVersion
3. Delete the file: "WarnonBadCertReceving"
4. Delete the file: "WarnOnPostRedirect"
5. Open the map: HKEY_CURRENT_USERS\Software\Microsoft\Windows NT\CurrentVersion\Winlogon.
(Click with the right mouse on the file: "Shell" and then Modify. You see that the filename is "Hotfix.exe")
6. Delete the file: "Hotfix".
7 Restart your computer.
Succes !!!!!
Danny.
Hi! Thanks for sharing your comment I am having troubles with this f****** AntiSpy Safegaurd and I was wondering where I can find the 'startup programs' I've searched for it in the control panel but no sign, so please help me I really need to remove this s***
Thanks, your manual instructions worked for me. Got that bad boy off.
HI, on my laptop this fake spyware wont let me go online. so im using my main computer how do i get ride of it if it wont let me go online?
I CANT GET RID OF THIS ANTISPY SAFEGUARD I CANT ACCESS SYSTEM RESTORE ITS DRIVING ME MAD !!!! PLEASE HELP REGEDIT BEEN DISABLED BY YOUR ADMINISTRATOR ?
i don't see how your way works, either. there is no "currently running programs" choice in Windows control panel
I have windows 7 and there is nothing in my Startup folder. Is there another Startup programs location? How can it be done that way on Windows 7?
michael, where in the control panel is a icon labeled \" startup programs\" ... i am having the same problems, i have the antispy safeguard going on but i cant access my task manager to ride myself of it...please anyone help....thanks!
Can someone please help.I have antispy safeguard running and can't get rid if it.I tried to start in safe but it comes up in all the modes?? I don't know what to do next the darn thing is driving me crazy. Tks,Joe