Home > Threats > Safety Center

What is Safety Center

Posted on 6 October 2009 under Rogue Programs

1. What is Safety Center?

It is fraudulent and effectless computer protection tool, which main hoggish purpose is to make user pay for fake tool's activation. Payment is made in unsecured manner, thus stealing victim’s important information that has been provided at the time of transaction.

Safety Center will illegaly alter Google.com, adding a fake notice at the bottom of the home page: Google search has detected an unregistered version of PrivacyCenter and recommends updating to the full version for safe web browsing.

Trojan-Mailer.Win32.Spambot will be detected by Safety Center, asking user to make a full computer scan and purchase licensed version afterwards. Also many security related warnings will be displayed, which will lead towards counterfeit payment page:
- "Spyware Warning"
- "Registry Error"
- "Firewall Warning"
- "Database update failed"
- "Running trial version".

2. Safety Center screen shot:

Safety Center

3. How to remove Safety Center:

  1. Internet connection might be disabled or Internet browser might be blocked by Safety Center, so it won't be possible to download any files to infected computer. In this case please download all files required for Safety Center removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove Safety Center download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove Safety Center.

  5. Restart the computer to complete Safety Center removal procedure.

4. Safety Center files:

protector.exe

5. Hijackthis entries:

O4 - HKLM\..\RunOnce: [SafetyCenter] C:\Program Files\SafetyCenter\start.exe