ShieldSafeness Description

 

 

[+] Click Image to Enlarge

 

 

CartCartCartCartCartCartCartCartCart

Shieldsafeness is a rogue anti-spyware program that uses fabricated system scan results and misleading popup notifications to make computer users believe that they need to purchase Shieldsafeness in order to remove the detected threats. Shieldsafeness is not able to detect any type of computer parasites or threat.

Shieldsafeness sometimes comes from a website that supposedly provides videos but in essence is a malicious source that was designed to push the Shieldsafeness application. Shieldsafeness is not a trusted program. Shieldsafeness can be difficult to manually detect and remove in many cases.

Type: Rogue AntiSpyware Programs

Automatic Detection of ShieldSafeness

ShieldSafeness Technical Report

As new ShieldSafeness details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following ShieldSafeness files with its MD5s were created in the system:

ShieldSafeness has typically the following processes in memory:

• 2z075t59j48c.exe
• ShieldSafeness.exe
• C:\Program Files\ShieldSafeness Software\ShieldSafeness\ShieldSafeness.exe
• unp4.tmp.exe

ShieldSafeness created the following directories, files, paths:

• %ProgramFiles%\ShieldSafeness Software\ShieldSafeness
• %AllUsersProfile%\Start Menu\Programs\ShieldSafeness

ShieldSafeness creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\ShieldSafeness
• ShieldSafeness
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShieldSafeness
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “unp4.tmp.exe”
• HKEY_CURRENT_USER\Software\ShieldSafeness
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “ShieldSafeness”

Important Article Disclaimer