Home Malware Programs Rogue Anti-Spyware Programs SafetyPC

SafetyPC

Posted: July 13, 2010

SafetyPC (or Safety PC) is a rogue anti-spyware program which spreads via Trojan infections, spam emails or by using affiliated websites. SafetyPC generates fabricated pop-up alert messages and fake system scans, which report the presence of supposed infections on the user's computer. Safety PC will bombard the user with fake alert messages, suggesting the user purchase the full version of this fake software to remove the so-called threats. If Safety PC is detected in a machine, it should be terminated immediately using reliable anti-spyware software.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 C:\Documents and Settings\{username}\Desktop\SafetyPC.lnk
    2 C:\Documents and Settings\{username}\Desktop\SafetyPC_Setup.exe
    3 C:\Program Files\SafetyPC
    4 C:\Program Files\SafetyPC\libmysql.dll
    5 C:\Program Files\SafetyPC\SafetyPCDB
    6 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes000.cft
    7 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes001.cft
    8 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes002.cft
    9 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes003.cft
    10 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes004.cft
    11 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes005.cft
    12 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes006.cft
    13 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes007.cft
    14 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes008.cft
    15 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes009.cft
    16 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes010.cft
    17 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes011.cft
    18 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes012.cft
    19 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes013.cft
    20 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes014.cft
    21 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes015.cft
    22 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes016.cft
    23 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes017.cft
    24 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes018.cft
    25 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes019.cft
    26 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes020.cft
    27 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes021.cft
    28 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes022.cft
    29 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes023.cft
    30 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes024.cft
    31 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes025.cft
    32 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes026.cft
    33 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes027.cft
    34 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes028.cft
    35 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes029.cft
    36 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes030.cft
    37 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes031.cft
    38 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes032.cft
    39 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes033.cft
    40 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes034.cft
    41 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes035.cft
    42 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes036.cft
    43 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes037.cft
    44 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes038.cft
    45 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes039.cft
    46 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes040.cft
    47 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes041.cft
    48 C:\Program Files\SafetyPC\SafetyPCDB\SafetyRes042.cft
    49 C:\Program Files\SafetyPC\safetypceye.exe
    50 C:\Program Files\SafetyPC\safetypcicon.ico
    51 C:\Program Files\SafetyPC\safetypcup.exe
    52 C:\Program Files\SafetyPC\safetypcux.exe
    53 C:\Program Files\SafetyPC\uninstall.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\safetypcHKEY_CURRENT_USER\Software\SafetyPCHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}safetypc

Related Posts

Loading...