Computer‎ > ‎Malware‎ > ‎Rouge Softwares‎ > ‎

SafetyAntiSpyware

SafetyAntispyware is a new rogue anti-spyware application. However, the functionality follows the same pattern as other rogues.


First, it will detect some fake infections. Then it will ask the user to license the product to remove these "threats". It will also keep reminding the user about these fake infections and will urge the user to activate the software.


Known system changes:

Files
%Desktop%\Safety Anti-Spyware 3.lnk
%ProgramFiles%\Safety Anti-Spyware 3\Safety Anti-Spyware 3.exe

Folders
%ProgramFiles%\Safety Anti-Spyware 3
%StartMenu%\Safety Anti-Spyware 3

RegistryEntries
Key: HKEY_CURRENT_USER\Software\21CDEB48ECA505D5BCF7433258F34A70
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Safety Anti-Spyware 3
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value: Safety Anti-Spyware 3
Comments