SoftSafeness Description

SoftSafeness is a rogue anti-spyware program that comes from the same group that developed the fake security programs BlockDefense, SafetyKeeper and SystemCop. SoftSafeness, like other rogues, will display many fake system messages in addition to conducting bogus system scans. SoftSafeness may slow down the performance of your system and block installed security programs which could make detection and removal of SoftSafeness difficult.

Type: Rogue AntiSpyware Programs

How Can You Detect SoftSafeness?

SoftSafeness Technical Report

As new SoftSafeness details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following SoftSafeness files with its MD5s were created in the system:

SoftSafeness has typically the following processes in memory:

• 2z125spambot679.exe
• ozn695m5.exe
• C:\Program Files\SoftSafeness Software\SoftSafeness\SoftSafeness.exe
• SoftSafeness.exe

SoftSafeness created the following directories, files, paths:

• %ProgramFiles%\SoftSafeness Software\SoftSafeness
• %AllUsersProfile\Start Menu\Programs\SoftSafeness

SoftSafeness creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\SoftSafeness
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “ozn695m5.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftSafeness
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SoftSafenessSvc
• SoftSafeness
• HKEY_CURRENT_USER\Software\SoftSafeness
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SOFTSAFENESSSVC
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “SoftSafeness”

Important Article Disclaimer