Remove Safety Center. Description and removal instructions

 
Title: Safety Center
Also known as: SafetyCenter
Type: Spyware
Severity scale:Safety Center severity is 72  (72 / 100)
 
Safety Center is a rogue security program that reports false and exaggerated system security threats to convince you that your computer is infected. The bogus application is just another variant of Secret Service and Privacy Center malware. Once active, it will create harmless files on your computer and then detect those files as serious infections. Finally, Safety Center will prompt you to purchase a registered version of the program to remove non-existing system security threats. Do not purchase this program and uninstall Safety Center from the system as soon as possible.

Safety Center is promoted through the use of Trojan viruses and other malware. Very often, users infect their computers when they install fake video codecs or drivers that are supposedly required to view certain online videos. Trojans then display fake security alerts and claim that you must install SafetyCenter to remove threats which don’t exist. Once installed, the rogue program will scan your computer and display a variety of infections. It will claim that those infections can not be removed with a trial version and suggest you to buy a full version of the rogue program. Of course, you shouldn't buy it. It's nothing more but a scam.

To make things even worse, Safety Center will constantly display fake security alerts and notifications about serious infections and security risks. It will display fake firewall alerts and spyware activity warnings. You will see fake security warnings with the following text:

"Warning! Running trial version!
The security of your computer has been compromised!
Now running trial version of the software!
Click here to purchase the full version of the software and get full protection for your PC!"

"Safety Center
Don't panic!
SafetyCenter software managed to detect and block the attack attempt! Please follow the instructions to get full protection"

"Spyware activity blocked
Subject: Trojan-Mailer.Win32.Spambot
Description: This Trojan sends email spam to your address book contacts.
Result: Threat blocked
Recommended: Make a full scan of your computer"

Furthermore, SafetyCenter will hijack your web browsers and display warnings that you can't open certain websites because your computer or network is infected. Those warnings read:

"We are sorry but your query looks similar to requests from a computer infected by viruses or spyware applications. To protect our users, we can't proceed with your request at the moment. We will restore your access as quickly as possible, so try again later."

If you find that your computer is infected with this parasite, please use the removal guide below to remove Safety Center from the system manually for free. Removal delay will only worsen the situation because the rogue program will download additional malware onto your computer. Installed malware can disable various Windows tools and options including Task manager, registry editor, safe mode and others.



Related files: gbaxl2.dat, tdfhex.dll, emalware.cvd, default.pss, Adrevolver.txtAds360.com, 0886b8.vom, sound.wav, main.ico, install_tag002.exe, trojan.psw.stealth.a.exe, cs_def.exe, 102.exe, protector.exe

Safety Center properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

Safety Center snapshot:
Safety Center removal

Automatic Safety Center removal:

remover for Safety Center

Safety Center manual removal:

Kill processes:
protector.exe 102.exe cs_def.exe trojan.psw.stealth.a.exe install_tag002.exe
Delete registry values:
HKEY_CLASSES_ROOT\CLSID\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_CLASSES_ROOT\CLSID\{EB09B56A-91AB-11DE-95FD-A39056D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EB09B56A-91AB-11DE-95FD-A39056D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace\{BCA9B86C-91BC-11DE-B1CD-35C755D89593}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SafetyCenter
HKEY_LOCAL_MACHINE\SOFTWARE\SafetyCenter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce "SafetyCenter"
Unregister DLLs:
tdfhex.dll

Delete files:
protector.exe 102.exe cs_def.exe trojan.psw.stealth.a.exe install_tag002.exe main.ico sound.wav 0886b8.vom Adrevolver.txtAds360.com default.pss emalware.cvd tdfhex.dll gbaxl2.dat
Delete directories:
c:\Program Files\SafetyCenter

Other programs to remove Safety Center:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 27/08/09
Information updated: 07/11/09

Additional resources related to Safety Center:

Attention: If you know or you have a website or page about Safety Center removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Safety Center parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by . 2009-11-07 05:11:14
how quickly does this work?

2. by . 2009-10-24 06:10:06
I have the virus on another laptop here, but none of the file and services you name are running. i will go through the registry entry by entry

3. by . 2009-09-16 17:09:32
non of these process are on my computer
protector.exe 102.exe cs_def.exe trojan.psw.stealth.a.exe install_tag002.exe
non of the registry values were there either but i did have the program safety center on my desktop and in my control panel. i think the program has changed

4. by . 2009-09-16 06:09:46
May also start a process called start.exe. Make sure to create a new restore point after removal !!!!!


Related news:
Similar parasites:
Related discussions: