Safety Center

Safety Center Description

ScreenshotSafety Center is a rogue anti-spyware application originating from the same family as Secret Service and Privacy Center. Safety Center must be installed manually, and once active, begins display fake infection results in order to trick the user into believing that the computer has been compromised. The user is then prompted to purchase the commercial version of Safety Center in order to combat these threats or fix the various problems.ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

Technical Information

File System Details

Safety Center creates the following file(s):
# File Name MD5 Detection Count
1 cs_def.exe N/A
2 Adrevolver.txtAds360.com N/A
3 102.exe N/A
4 install_tag002.exe N/A
5 start.exe N/A
6 protector.exe N/A
7 trojan.psw.stealth.a.exe N/A
8 tdfhex.dll N/A
9 0886b8.vom N/A
10 gbaxl2.dat N/A
11 sound.wav N/A
12 emalware.cvd N/A
13 main.ico N/A
14 default.pss N/A
15 SafetyCenter N/A
16 %ProgramFiles%\SafetyCenter N/A
17 setup[1].exe 1f761fc012336d4fba67c6638c182826 N/A
18 protector.exe e1ad9c7b0cde33daaf77ee2963200204 N/A
19 ~2.dll 52f049d416769edb816c0ac60ce3bf1c N/A
20 u3[1].exe 512f139a3d86560c14aa89b629867ef5 N/A
21 start.exe 40b38ab43826bb70afa80ee1ab0d307e N/A
22 start.exe 516f4420183db0838f91ca3564643e60 N/A
23 protector.exe bea1f7bcb5aa7c5d5daeb8d4e27eb3bf N/A
24 start.exe 13038e955847a280da1231fc6dc07c5e N/A
25 start.exe b5eb627ba12d421daaf64f0bf20b621d N/A
26 start.exe 9dacbe9402b1264018eabb917a7b653e N/A
27 start.exe ab672be83c7fa28639b8da6cc62e6288 N/A
28 start.exe 3ca8dad2f85b17aa931ab00b18374d18 N/A
29 start.exe 878433485252c309ef1a072c3269b990 N/A
30 start.exe 51c5af198df85cca8162c21b8172733c N/A
31 start.exe 45ae05272c90fd68c712c232112ac60f N/A
32 start.exe 5384d1bc58886ce4a8d29429e0a74033 N/A
33 start.exe a0d0e5626c7d57d267460ac5452a1bec N/A
34 hlp.dll 231ec9438897ec57a38aab34afdd36b3 N/A
35 hlp.dll d0e88a8e331603c5599a13f255495c34 N/A
36 ~52C.dll d40c15aa49878c82f3cf7d0816d97020 N/A
37 ho.dll 01508bdaf8e02c5e4e004bc1152f1e9e N/A
38 start.exe 9514a657f138aff8c5b7ff89f4e3ca78 N/A
39 ie.dll 93fa28bb594d31c347eeb67d416547c2 N/A
40 start.exe f165dd7bdf838c4bd5dad7a95814bdf2 N/A
41 start.exe 47c6ead321dc9c3d726aea1dc3bf188e N/A
42 start.exe 6923ec2e77a58a501eae550f40d39272 N/A
43 temp.dll 89947e28fb7444a418a885d4339fda30 N/A

Registry Details

Safety Center creates the following registry entry or registry entries:
RegistryKey
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EB09B56A-91AB-11DE-95FD-A39056D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\SafetyCenter
SOFTWARE\SafetyCenter
0766AD3F-6636-454E-B95B-FDB1DD2CE4EB
A73890FC-177F-4198-AE3D-C64F7D9E69D8
HKEY_CLASSES_ROOT\CLSID\{EB09B56A-91AB-11DE-95FD-A39056D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SafetyCenter
EB09B56A-91AB-11DE-95FD-A39056D89593
88A5EFA0-AA5D-4684-9CC2-5EDEC8E84655
DD1984BA-25E1-4F56-B124-A07ED6B2A87F
HKEY_CLASSES_ROOT\CLSID\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce "SafetyCenter"
BCA9B86C-91BC-11DE-B1CD-35C755D89593
2414A739-9651-441B-BC10-D773267CC19D
95E14BC7-C5F1-4545-8064-E8DAA621580C