Windows Safety Maintenance

Windows Safety Maintenance Description



Windows Safety Maintenance Screenshot 1With the scamware factory of Win32/FakeVimes showing no signs of stopping, Windows Safety Maintenance is just the next model on its production line and shares all the common (and fraudulent) traits of its family. Like many other types of FakeVimes>-derived PC threats, Windows Safety Maintenance pretends to be an anti-malware product, but Windows Safety Maintenance’s warning messages sound alarms about fake threats and its scans will always show negative results that don’t sync with reality. Even if you know well enough to avoid spending money on Windows Safety Maintenance’s valueless registration key, SpywareRemove.com malware researchers still recommend that you delete Windows Safety Maintenance as soon as you can launch suitable security software. Until Windows Safety Maintenance is removed, your PC will also be compromised by a variety of security attacks as well as suffering through potential browser redirects to harmful sites.

Why Maintaining Your Distance from Windows Safety Maintenance is a Terrific Idea


Windows Safety Maintenance, rather than being the original anti-malware program that Windows Safety Maintenance wants you to believe Windows Safety Maintenance is, is a clone built off of the same template that other recent variants of Win32/FakeVimes have used. Closely-related names in rogue anti-malware software include (among other possible examples) Windows Risk Minimizer, Windows Safety Series, Internet Security Suite, Windows Protection Master, Windows Pro Defence, Windows Safety Manager, Windows High-End Protection, Windows PC Aid, Smart Internet Protection 2011, Windows AntiHazard Helper, Windows Software Keeper, My Security Wall, Windows Control Series, Windows No-Risk Center, Windows Anti-Malware Patch, Windows Secure Workshop, Anti-Malware Lab, Windows Basic Antivirus, Windows Threats Destroyer, Windows Warding System, Windows Active Guard, PrivacyGuard PRO, Windows Process Director, Windows Performance Adviser, Windows Stability Guard, Windows Antivirus Machine, Windows Pro Solutions, VirusSecurity, Windows System Defender, Windows Efficiency Accelerator, Windows Smart Partner, Best Malware Protection, Windows Guardian Angel, Total Anti Malware Protection, Live PC Care, Fast Antivirus 2009, Windows Antivirus Care, Windows Advanced Security Center, Antivirus Smart Protection, Windows Care Taker, Windows Sleek Performance, Personal Internet Security 2011, Windows Daily Adviser, Windows Safety Wizard, Windows Home Patron, Windows Interactive Safety, Windows Protection Maintenance, Home Malware Cleaner, My Security Engine, Windows Protection Unit, Windows Internet Booster, Windows Maintenance Suite, Windows Secure Web Patch, Windows Personal Doctor, Windows Custodian Utility, Windows Virtual Firewall, Windows Virtual Security, Home Safety Essentials, Windows Privacy Module, Windows Web Combat, Additional Guard, Windows Defence Counsel, Windows Instant Scanner, Windows Debug Center, Windows Safety Toolkit, Windows Custom Safety, Security Master AV, Windows Enterprise Suite, Windows Abnormality Checker, Windows Secure Workstation, XP Smart Security, Windows Functionality Checker, Windows Private Shield, Windows Turnkey Console, Windows Virtual Angel, Smart Internet Protection 2012, Windows Antihazard Solution, Windows Safety Checkpoint, Windows AntiHazard Center, Windows Interactive Security, Windows Security System, Live Enterprise Suite, Windows Problems Stopper, Windows Malware Sleuth, Windows Shielding Utility, PC Live Guard, Windows Firewall Constructor, Windows Virus Hunter, Windows Managing System, Windows ProSecure Scanner, Windows Privacy Extension, Windows PRO Scanner, Windows Performance Catalyst, Windows Trouble Taker, Windows Premium Console, Windows Custom Management, Windows Guard Tools, Windows Proactive Safety, Windows Security Suite, Windows Defending Center, Windows First-Class Protector, Windows Crucial Scanner, Windows Be-on-Guard Edition, Windows Enterprise Defender, CleanUp Antivirus, Windows No-Risk Agent, Windows Antivirus Rampart, Windows Safeguard Upgrade, Enterprise Suite, Windows Smart Warden, Windows Multi Control System, Windows Expert Series, Extra Antivirus, Windows Shield Tool, Windows Telemetry Center, Personal Security Sentinel, Windows Tools Patch, Windows Security Renewal, Windows Pro Web Helper, Windows Ultimate Safeguard, Windows Safety Module, Windows Activity Debugger, Windows Privacy Counsel, Windows Advanced User Patch, My Security Shield, Windows Software Saver, Windows Guard Solutions, Keep Center Keeper, Virus Doctor, Smart Security, Windows ProSecurity Scanner, Windows Pro Safety Release, Internet Security Essentials, Strong Malware Defender, Volcano Security Suite, Activate Ultimate Protection, Windows Antivirus Release, Windows Ultimate Security Patch, Windows Profound Security, Windows Health Keeper, Windows Active Defender, Windows Secure Surfer, Windows Pro Safety, Windows Web Commander, Windows Premium Defender, Windows Maintenance Guard, Smart Virus Eliminator, Windows Premium Guard, Smart Anti-Malware Protection, Windows Pro Rescuer, System Protection Tools, Windows Proprietary Advisor, Windows Antivirus Patch, Best Antivirus Software, Windows Advanced Toolkit, Security Antivirus and Smart Engine. These PC threats, including Windows Safety Maintenance, aren’t capable of providing actual protection for your PC but cover for their shortcomings by displaying fraudulent security information.

Windows Safety Maintenance’s fake security displays can include various pop-ups, including fake toolbar notifications that cloak themselves in the guise of Windows alerts, as well as system scans that always return results that are full of nonexistent infections (including technically-identified Trojans, spyware, and other types of high-level PC threats).
Download SpyHunter Spyware Scanner
Since all of this information is fraudulent, SpywareRemove.com malware research team encourages you to turn a stiff upper lip to Windows Safety Maintenance’s fake warnings and avoid spending any money on the software registration process that Windows Safety Maintenance attempts to foist upon you.

The Danger of Scamware That Pretends to Be a Safety-Enhancer


In-between its attempts to snatch your money in return for the equally-unpleasant ‘paid’ version of its software, Windows Safety Maintenance may also make attacks against your web browser and overall Windows security. SpywareRemove.com malware experts have found the following Windows Safety Maintenance-related symptoms to be especially worth mentioning, since they can cause your PC to be vulnerable to future attacks:
  • Windows Safety Maintenance may alter your Windows Hosts file to cause browser redirects to malicious sites. SpywareRemove.com malware researchers have noted that popular search engines like Google are especially likely to be used as triggers for these redirect attacks.
  • Windows security features may be disabled; this includes the User Account Control and default protection against files with improper ID signatures.
  • You may also find that your security programs, such as anti-virus scanners and Windows tools like Task Manager are blocked by Windows Safety Maintenance. Either registering Windows Safety Maintenance with the code ’0W000-000B0-00T00-E0020′ or disabling Windows Safety Maintenance via Safe Mode can help to avoid these attacks and remove Windows Safety Maintenance with your choice of anti-malware product.


Windows Safety Maintenance Automatic Detection Tool (Recommended)


Is your PC infected with Windows Safety Maintenance? To safely & quickly detect Windows Safety Maintenance, we highly recommend you run the malware scanner listed below.



Visual & GUI Characteristics


Windows Safety Maintenance Screenshot 2Windows Safety Maintenance Screenshot 3Windows Safety Maintenance Screenshot 4Windows Safety Maintenance Screenshot 5Windows Safety Maintenance Screenshot 6Windows Safety Maintenance Screenshot 7Windows Safety Maintenance Screenshot 8Windows Safety Maintenance Screenshot 9Windows Safety Maintenance Screenshot 10Windows Safety Maintenance Screenshot 11

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
  • The following files were created in the system:
    # File Name Detection Count
    1 Windows Safety Maintenance.lnk 438
    2 %APPDATA%\ Protector-ttqo.exe 307
    3 %APPDATA%\ Protector-ysgk.exe 59
    4 %APPDATA%\ Protector-trei.exe 49
    5 %AppData%\result.db N/A
    6 %AppData%\NPSWF32.dll N/A
    7 %AppData%\Protector-{RANDOM 3 CHARACTERS}.exe N/A
    8 %AppData%\Protector-{RANDOM 4 CHARACTERS}.exe N/A
    9 %StartMenu%\Windows Safety Maintenance.lnk N/A
    10 %AppData%\Microsoft\Internet Explorer\Quick Launch\Windows Safety Maintenance.lnk N/A
    11 %AppData%\Windows Safety Maintenance\Instructions.ini N/A
    12 %AppData%\Windows Safety Maintenance\ScanDisk_.exe N/A
    13 %CommonAppData%\58ef5\SPT.ico N/A
    14 %CommonAppData%\58ef5\SP98c.exe N/A
    15 %CommonAppData%\SPUPCZPDET\SPABOIJT.cfg N/A
    16 %Desktop%\Windows Safety Maintenance.lnk N/A
    17 %Programs%\Windows Safety Maintenance.lnk N/A

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\Protector-[rnd].exeHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings\UID [RANDOM CHARACTERS]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXEHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0

Additional Information

  • The following messages's were detected:
    # Message
    1System alert Suspicious software which may be dangerous has been detected on your PC. Click here to remove this threat immediately using System Protection Tools.
    2System alert System Protection Tools has detected potentially harmful software in your system. It is strongly recommended that you register System Protection Tools to remove all found threats immediately.
    3System warning No real-time malware, spyware and virus protection was found. Click here to activate.
    4Warning Warning! Virus detected
    5Warning! Identity theft attempt detected Hidden connection IP: 128.154.26.11 Target: Microsoft Corporation keys
Posted: May 24, 2012 | By
Share:
Follow Me on Pinterest More More
Threat Level: 10/10
1 Star2 Stars3 Stars4 Stars5 Stars (1 votes, average: 5.00 out of 5)
Loading ... Loading ...
Rate this article:
Detection Count: 49

2 Comments

Leave a Reply

What is 5 + 5 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)