Antimalware PC Safety

Antimalware PC Safety Description

Screenshot

Antimalware PC Safety – A Fake Anti-malware Tool Distributed by Scammers

Antimalware PC Safety is a rogue security program. Its interface is very similar to the Microsoft Security Center and to the group of rogue security programs belonging to the FakeVimes family of malware. ESG security researchers have received reports of numerous Antimalware PC Safety infections, particularly in French-speaking regions. This fake security program is designed to convince inexperienced computer users that their computer is infected. By scaring them into believing that they are the victims of a severe malware attack, criminals can then attempt to sell fake security programs (such as a supposedly 'full' version of Antimalware PC Safety) to these affected computer users. Because of these kinds of methods, malware analysts often refer to fake anti-malware applications like Antimalware PC Safety and its clones as 'scareware', that is, software designed to scare its victims in order to scam them in some way.

Among the many clones of Antimalware PC Safety are Virus Melt, Extra Antivirus, Fast Antivirus 2009, Presto TuneUp, Windows Security Suite, Windows Protection Suite, Smart Virus Eliminator, Packed.Generic.245, Volcano Security Suite, Windows Enterprise Suite, Enterprise Suite, Additional Guard, PC Live Guard, Live PC Care, Live Enterprise Suite, Security Antivirus, My Security Wall, CleanUp Antivirus, Smart Security, Windows Work Catalyst.

If your computer system is displaying warnings and error messages supposedly coming from Antimalware PC Safety, ESG malware analysts recommend running a system scan of your computer using a reliable anti-malware tool to remove the problem completely. Failure to remove Antimalware PC Safety in a timely manner will almost always result in additional malware entering your computer. Even so, a computer system with an Antimalware PC Safety infection will usually become annoying, if not impossible, to operate.

Symptoms of an Antimalware PC Safety Infection

Antimalware PC Safety uses several tactics to ensure that its victims are scared enough to fall for the scam. The main way Antimalware PC Safety makes its victims panic is by displaying a constant, aggressive barrage of error messages, pop-up notifications and alarming fake virus reports and system scans. An inexperienced computer user, faced with constant messages claiming that the computer system is infected, may not understand that the real infection is Antimalware PC Safety, instead of all of the supposed malware found in its reports.

Antimalware PC Safety also makes a computer system become slow and unstable, and can affect web browsing as well change the victim's desktop image. In some cases, Antimalware PC Safety has been found to interfere with legitimate security programs or with the victim's files, even going so far as to block perfectly harmless applications like Notepad. Since Antimalware PC Safety makes changes to the Windows Registry that permit Antimalware PC Safety to carry out these attacks, ESG security analysts recommend using a trusted anti-malware tool in order to remove Antimalware PC Safety and its harmful components automatically.
[ttemplate:statistic]

Do You Suspect Your PC May Be Infected with Antimalware PC Safety & Other Threats? Scan Your PC with SpyHunter

SpyHunter is a powerful malware remediation and protection tool designed to help provide PC users with in-depth system security analysis, detection and removal of a wide range of threats like Antimalware PC Safety as well as a one-on-one tech support service. Download SpyHunter's FREE Malware Remover
Note: SpyHunter's scanner is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware removal tool to remove the malware threats. Read more on SpyHunter. Free Remover allows you to run a one-off scan and receive, subject to a 48-hour waiting period, one remediation and removal. Free Remover subject to promotional details and Special Promotion Terms. To understand our policies, please also review our EULA, Privacy Policy and Threat Assessment Criteria. If you no longer wish to have SpyHunter installed on your computer, follow these steps to uninstall SpyHunter.

Security Doesn't Let You Download SpyHunter or Access the Internet?

Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in "Safe Mode with Networking" and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.
If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Screenshots & Other Imagery

Tip: Turn your sound ON and watch the video in Full Screen mode to fully experience how Antimalware PC Safety infects a computer.

How 'Antimalware PC Safety' Rogue Infects a Computer Video

Antimalware PC Safety Image 1 Antimalware PC Safety Image 2 Antimalware PC Safety Image 3 Antimalware PC Safety Image 4 Antimalware PC Safety Image 5 Antimalware PC Safety Image 6

Registry Details

Antimalware PC Safety creates the following registry entry or registry entries:
Run keys
Antimalware PC Safety
Directory
%APPDATA%\Antimalware PC Safety
File name without path
Antimalware PC Safety.lnk
Regexp file mask
%AllUsersProfile%\??????\AntimalwarePCS.exe
%AllUsersProfile%\??????\AP[RANDOM CHARACTERS]_[NUMBERS].exe
%AllUsersProfile%\?????\AP[RANDOM CHARACTERS].exe
%AllUsersProfile%\Application Data\??????\AntimalwarePCS.exe
%AllUsersProfile%\Application Data\??????\AP[RANDOM CHARACTERS]_[NUMBERS].exe
%AllUsersProfile%\Application Data\?????\AP[RANDOM CHARACTERS].exe
RegistryKey
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Antimalware PC Safety" "%CommonAppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe" /s /d

More Details on Antimalware PC Safety

The following messages associated with Antimalware PC Safety were found:
System Alert
Antimalware PC Safety has detected potentially harmful software in your system. It is strongly recommended that you register Antimalware PC Safety to remove all found threats immediately.
Warning! Access conflict detected!
An unidentified program is trying to access system process address space.
Process Name: AllowedForm
Location: C:Windows... askmgr.exe
Warning! Identity theft attempt detected
Warning! Virus detected
Threat Detected: Trojan-PSW.VBS.Half
Description: This is a VBScript-virus. It steals users passwords.

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their PC with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your PC. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

One Comment

  • Antivirus in Kolkata:

    Thanks for sharing the info here. Keep up the good work. All the best.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.