Safety Center

Safety Center Image

Safety Center is a rogue anti-spyware application originating from the same family as Secret Service and Privacy Center. Safety Center must be installed manually, and once active, begins display fake infection results in order to trick the user into believing that the computer has been compromised. The user is then prompted to purchase the commercial version of Safety Center in order to combat these threats or fix the various problems.ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

File System Details

Safety Center may create the following file(s):
# File Name MD5 Detections
1. cs_def.exe
2. Adrevolver.txtAds360.com
3. 102.exe
4. install_tag002.exe
5. start.exe
6. protector.exe
7. trojan.psw.stealth.a.exe
8. tdfhex.dll
9. 0886b8.vom
10. gbaxl2.dat
11. sound.wav
12. emalware.cvd
13. main.ico
14. default.pss
15. SafetyCenter
16. %ProgramFiles%\SafetyCenter
17. setup[1].exe 1f761fc012336d4fba67c6638c182826
18. protector.exe e1ad9c7b0cde33daaf77ee2963200204
19. ~2.dll 52f049d416769edb816c0ac60ce3bf1c
20. u3[1].exe 512f139a3d86560c14aa89b629867ef5
21. start.exe 40b38ab43826bb70afa80ee1ab0d307e
22. start.exe 516f4420183db0838f91ca3564643e60
23. protector.exe bea1f7bcb5aa7c5d5daeb8d4e27eb3bf
24. start.exe 13038e955847a280da1231fc6dc07c5e
25. start.exe b5eb627ba12d421daaf64f0bf20b621d
26. start.exe 9dacbe9402b1264018eabb917a7b653e
27. start.exe ab672be83c7fa28639b8da6cc62e6288
28. start.exe 3ca8dad2f85b17aa931ab00b18374d18
29. start.exe 878433485252c309ef1a072c3269b990
30. start.exe 51c5af198df85cca8162c21b8172733c
31. start.exe 45ae05272c90fd68c712c232112ac60f
32. start.exe 5384d1bc58886ce4a8d29429e0a74033
33. start.exe a0d0e5626c7d57d267460ac5452a1bec
34. hlp.dll 231ec9438897ec57a38aab34afdd36b3
35. hlp.dll d0e88a8e331603c5599a13f255495c34
36. ~52C.dll d40c15aa49878c82f3cf7d0816d97020
37. ho.dll 01508bdaf8e02c5e4e004bc1152f1e9e
38. start.exe 9514a657f138aff8c5b7ff89f4e3ca78
39. ie.dll 93fa28bb594d31c347eeb67d416547c2
40. start.exe f165dd7bdf838c4bd5dad7a95814bdf2
41. start.exe 47c6ead321dc9c3d726aea1dc3bf188e
42. start.exe 6923ec2e77a58a501eae550f40d39272
43. temp.dll 89947e28fb7444a418a885d4339fda30

Registry Details

Safety Center may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EB09B56A-91AB-11DE-95FD-A39056D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\SafetyCenter
SOFTWARE\SafetyCenter
0766AD3F-6636-454E-B95B-FDB1DD2CE4EB
A73890FC-177F-4198-AE3D-C64F7D9E69D8
HKEY_CLASSES_ROOT\CLSID\{EB09B56A-91AB-11DE-95FD-A39056D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SafetyCenter
EB09B56A-91AB-11DE-95FD-A39056D89593
88A5EFA0-AA5D-4684-9CC2-5EDEC8E84655
DD1984BA-25E1-4F56-B124-A07ED6B2A87F
HKEY_CLASSES_ROOT\CLSID\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce "SafetyCenter"
BCA9B86C-91BC-11DE-B1CD-35C755D89593
2414A739-9651-441B-BC10-D773267CC19D
95E14BC7-C5F1-4545-8064-E8DAA621580C

Trending

Most Viewed

Loading...