Home Malware Programs Rogue Anti-Spyware Programs SafetyPC

SafetyPC

Posted: July 13, 2010

SafetyPC (or Safety PC) is a rogue anti-spyware program which spreads via Trojan infections, spam emails or by using affiliated websites. SafetyPC generates fabricated pop-up alert messages and fake system scans, which report the presence of supposed infections on the user's computer. Safety PC will bombard the user with fake alert messages, suggesting the user purchase the full version of this fake software to remove the so-called threats. If Safety PC is detected in a machine, it should be terminated immediately using reliable anti-spyware software.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 C:\Documents and Settings\{username}\Desktop\SafetyPC.lnk
    2 C:\Documents and Settings\{username}\Desktop\SafetyPC_Setup.exe
    3 C:\Program Files\SafetyPC
    4 C:\Program Files\SafetyPC\libmysql.dll
    5 C:\Program Files\SafetyPC\SafetyPCDB
    6 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes000.cft
    7 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes001.cft
    8 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes002.cft
    9 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes003.cft
    10 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes004.cft
    11 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes005.cft
    12 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes006.cft
    13 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes007.cft
    14 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes008.cft
    15 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes009.cft
    16 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes010.cft
    17 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes011.cft
    18 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes012.cft
    19 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes013.cft
    20 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes014.cft
    21 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes015.cft
    22 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes016.cft
    23 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes017.cft
    24 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes018.cft
    25 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes019.cft
    26 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes020.cft
    27 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes021.cft
    28 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes022.cft
    29 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes023.cft
    30 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes024.cft
    31 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes025.cft
    32 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes026.cft
    33 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes027.cft
    34 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes028.cft
    35 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes029.cft
    36 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes030.cft
    37 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes031.cft
    38 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes032.cft
    39 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes033.cft
    40 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes034.cft
    41 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes035.cft
    42 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes036.cft
    43 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes037.cft
    44 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes038.cft
    45 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes039.cft
    46 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes040.cft
    47 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes041.cft
    48 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes042.cft
    49 C:\Program Files\SafetyPC\safetypceye.exe
    50 C:\Program Files\SafetyPC\safetypcicon.ico
    51 C:\Program Files\SafetyPC\safetypcup.exe
    52 C:\Program Files\SafetyPC\safetypcux.exe
    53 C:\Program Files\SafetyPC\uninstall.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\safetypcHKEY_CURRENT_USER\Software\SafetyPCHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}safetypc

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to SafetyPC may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Related Posts