Windows Safety Maintenance
Windows Safety Maintenance Description
Why Maintaining Your Distance from Windows Safety Maintenance is a Terrific Idea
Windows Safety Maintenance, rather than being the original anti-malware program that Windows Safety Maintenance wants you to believe Windows Safety Maintenance is, is a clone built off of the same template that other recent variants of Win32/FakeVimes have used. Closely-related names in rogue anti-malware software include (among other possible examples) Windows Risk Minimizer, Windows Safety Series, Internet Security Suite, Windows Protection Master, Windows Pro Defence, Windows Safety Manager, Windows High-End Protection, Windows PC Aid, Smart Internet Protection 2011, Windows AntiHazard Helper, Windows Software Keeper, My Security Wall, Windows Control Series, Windows No-Risk Center, Windows Anti-Malware Patch, Windows Secure Workshop, Anti-Malware Lab, Windows Basic Antivirus, Windows Threats Destroyer, Windows Warding System, Windows Active Guard, PrivacyGuard PRO, Windows Process Director, Windows Performance Adviser, Windows Stability Guard, Windows Antivirus Machine, Windows Pro Solutions, VirusSecurity, Windows System Defender, Windows Efficiency Accelerator, Windows Smart Partner, Best Malware Protection, Windows Guardian Angel, Total Anti Malware Protection, Live PC Care, Fast Antivirus 2009, Windows Antivirus Care, Windows Advanced Security Center, Antivirus Smart Protection, Windows Care Taker, Windows Sleek Performance, Personal Internet Security 2011, Windows Daily Adviser, Windows Safety Wizard, Windows Home Patron, Windows Interactive Safety, Windows Protection Maintenance, Home Malware Cleaner, My Security Engine, Windows Protection Unit, Windows Internet Booster, Windows Maintenance Suite, Windows Secure Web Patch, Windows Personal Doctor, Windows Custodian Utility, Windows Virtual Firewall, Windows Virtual Security, Home Safety Essentials, Windows Privacy Module, Windows Web Combat, Additional Guard, Windows Defence Counsel, Windows Instant Scanner, Windows Debug Center, Windows Safety Toolkit, Windows Custom Safety, Security Master AV, Windows Enterprise Suite, Windows Abnormality Checker, Windows Secure Workstation, XP Smart Security, Windows Functionality Checker, Windows Private Shield, Windows Turnkey Console, Windows Virtual Angel, Smart Internet Protection 2012, Windows Antihazard Solution, Windows Safety Checkpoint, Windows AntiHazard Center, Windows Interactive Security, Windows Security System, Live Enterprise Suite, Windows Problems Stopper, Windows Malware Sleuth, Windows Shielding Utility, PC Live Guard, Windows Firewall Constructor, Windows Virus Hunter, Windows Managing System, Windows ProSecure Scanner, Windows Privacy Extension, Windows PRO Scanner, Windows Performance Catalyst, Windows Trouble Taker, Windows Premium Console, Windows Custom Management, Windows Guard Tools, Windows Proactive Safety, Windows Security Suite, Windows Defending Center, Windows First-Class Protector, Windows Crucial Scanner, Windows Be-on-Guard Edition, Windows Enterprise Defender, CleanUp Antivirus, Windows No-Risk Agent, Windows Antivirus Rampart, Windows Safeguard Upgrade, Enterprise Suite, Windows Smart Warden, Windows Multi Control System, Windows Expert Series, Extra Antivirus, Windows Shield Tool, Windows Telemetry Center, Personal Security Sentinel, Windows Tools Patch, Windows Security Renewal, Windows Pro Web Helper, Windows Ultimate Safeguard, Windows Safety Module, Windows Activity Debugger, Windows Privacy Counsel, Windows Advanced User Patch, My Security Shield, Windows Software Saver, Windows Guard Solutions, Keep Center Keeper, Virus Doctor, Smart Security, Windows ProSecurity Scanner, Windows Pro Safety Release, Internet Security Essentials, Strong Malware Defender, Volcano Security Suite, Activate Ultimate Protection, Windows Antivirus Release, Windows Ultimate Security Patch, Windows Profound Security, Windows Health Keeper, Windows Active Defender, Windows Secure Surfer, Windows Pro Safety, Windows Web Commander, Windows Premium Defender, Windows Maintenance Guard, Smart Virus Eliminator, Windows Premium Guard, Smart Anti-Malware Protection, Windows Pro Rescuer, System Protection Tools, Windows Proprietary Advisor, Windows Antivirus Patch, Best Antivirus Software, Windows Advanced Toolkit, Security Antivirus and Smart Engine. These PC threats, including Windows Safety Maintenance, aren’t capable of providing actual protection for your PC but cover for their shortcomings by displaying fraudulent security information.
Windows Safety Maintenance’s fake security displays can include various pop-ups, including fake toolbar notifications that cloak themselves in the guise of Windows alerts, as well as system scans that always return results that are full of nonexistent infections (including technically-identified Trojans, spyware, and other types of high-level PC threats). Since all of this information is fraudulent, SpywareRemove.com malware research team encourages you to turn a stiff upper lip to Windows Safety Maintenance’s fake warnings and avoid spending any money on the software registration process that Windows Safety Maintenance attempts to foist upon you.
The Danger of Scamware That Pretends to Be a Safety-Enhancer
In-between its attempts to snatch your money in return for the equally-unpleasant ‘paid’ version of its software, Windows Safety Maintenance may also make attacks against your web browser and overall Windows security. SpywareRemove.com malware experts have found the following Windows Safety Maintenance-related symptoms to be especially worth mentioning, since they can cause your PC to be vulnerable to future attacks:
- Windows Safety Maintenance may alter your Windows Hosts file to cause browser redirects to malicious sites. SpywareRemove.com malware researchers have noted that popular search engines like Google are especially likely to be used as triggers for these redirect attacks.
- Windows security features may be disabled; this includes the User Account Control and default protection against files with improper ID signatures.
- You may also find that your security programs, such as anti-virus scanners and Windows tools like Task Manager are blocked by Windows Safety Maintenance. Either registering Windows Safety Maintenance with the code ’0W000-000B0-00T00-E0020′ or disabling Windows Safety Maintenance via Safe Mode can help to avoid these attacks and remove Windows Safety Maintenance with your choice of anti-malware product.
Windows Safety Maintenance Automatic Detection Tool (Recommended)
Is your PC infected with Windows Safety Maintenance? To safely & quickly detect Windows Safety Maintenance, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect Windows Safety Maintenance
What happens if Windows Safety Maintenance does not let you open SpyHunter or blocks the Internet?
Visual & GUI Characteristics
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read
the tutorials on how to find malware,
kill unwanted processes,
remove malicious DLLs and
delete other harmful files. Always be
sure to back up your PC before making any changes.
- The following files were created in the system:
# File Name Detection Count 1 Windows Safety Maintenance.lnk 438 2 %APPDATA%\ Protector-ttqo.exe 307 3 %APPDATA%\ Protector-ysgk.exe 59 4 %APPDATA%\ Protector-trei.exe 49 5 %AppData%\result.db N/A 6 %AppData%\NPSWF32.dll N/A 7 %AppData%\Protector-{RANDOM 3 CHARACTERS}.exe N/A 8 %AppData%\Protector-{RANDOM 4 CHARACTERS}.exe N/A 9 %StartMenu%\Windows Safety Maintenance.lnk N/A 10 %AppData%\Microsoft\Internet Explorer\Quick Launch\Windows Safety Maintenance.lnk N/A 11 %AppData%\Windows Safety Maintenance\Instructions.ini N/A 12 %AppData%\Windows Safety Maintenance\ScanDisk_.exe N/A 13 %CommonAppData%\58ef5\SPT.ico N/A 14 %CommonAppData%\58ef5\SP98c.exe N/A 15 %CommonAppData%\SPUPCZPDET\SPABOIJT.cfg N/A 16 %Desktop%\Windows Safety Maintenance.lnk N/A 17 %Programs%\Windows Safety Maintenance.lnk N/A
Registry Modifications
Tutorial: To edit and delete registry entries manually, read the tutorial on
how to remove malicious registry entries.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
- The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\Protector-[rnd].exeHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings\UID [RANDOM CHARACTERS]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXEHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
Additional Information
- The following messages's were detected:
# Message 1 System alert Suspicious software which may be dangerous has been detected on your PC. Click here to remove this threat immediately using System Protection Tools. 2 System alert System Protection Tools has detected potentially harmful software in your system. It is strongly recommended that you register System Protection Tools to remove all found threats immediately. 3 System warning No real-time malware, spyware and virus protection was found. Click here to activate. 4 Warning Warning! Virus detected 5 Warning! Identity theft attempt detected Hidden connection IP: 128.154.26.11 Target: Microsoft Corporation keys
Posted: May 24, 2012 | By SpywareRemove
Share:
Threat Level: 10/10
Rate this article:
Detection Count: 49


More

OMG! This saved my son’s computer. Thank you so much!!!
OMG! Thank you so much!!!