AntiSpy Safeguard
Posted: August 24, 2010
Threat Metric
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
| Threat Level: | 10/10 |
|---|---|
| Infected PCs: | 8,577 |
| First Seen: | September 6, 2010 |
|---|---|
| Last Seen: | May 6, 2024 |
| OS(es) Affected: | Windows |
AntiSpy Safeguard aka AntiSpySafeguard is a fake anti-spyware program. AntiSpy Safeguard typically spreads via Trojans and it can also be obtained from malicious websites. AntiSpy Safeguard uses scare tactics to coerce users into purchasing its non-existent full version. AntiSpy Safeguard will display fake scan reports and security alerts to convince a victim that his/her system is infected and the only solution is to purchase its full version. Do not fall for this trickery. AntiSpy Safeguard is a useless application that should never be purchased.
Use SpyHunter to Detect and Remove PC Threats
If you are concerned that malware or PC threats similar to AntiSpy Safeguard may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.
* See Free Trial offer below. EULA and Privacy/Cookie Policy.
Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:C:\rogues\setup_ppr.exe
File name: setup_ppr.exeSize: 538.62 KB (538624 bytes)
MD5: ad60082522a3be42a67ff3d475a179bf
Detection count: 28
File type: Executable File
Mime Type: unknown/exe
Path: C:\rogues\setup_ppr.exe
Group: Malware file
Last Updated: May 6, 2024
C:\rogueware samples\folder\infested 11 11 2022\FAKEMSE.exe
File name: FAKEMSE.exeSize: 261.12 KB (261120 bytes)
MD5: b95c53797f4abccd71a512261319c2d2
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: C:\rogueware samples\folder\infested 11 11 2022\FAKEMSE.exe
Group: Malware file
Last Updated: May 6, 2024
%APPDATA%\defender.exe
File name: defender.exeSize: 263.68 KB (263680 bytes)
MD5: e4361627a79663841fc670b010f68630
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 13, 2010
C:\rogueware samples\folder\infested 11 11 2022\setup_rca.exe
File name: setup_rca.exeSize: 560.64 KB (560640 bytes)
MD5: d7adb8df647de3fa6b521e4e18ed57ef
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: C:\rogueware samples\folder\infested 11 11 2022\setup_rca.exe
Group: Malware file
Last Updated: May 6, 2024
%APPDATA%\antispy.exe
File name: antispy.exeSize: 665.6 KB (665600 bytes)
MD5: 7f00e69cd9b1c5b03626a5707ac04286
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: September 22, 2010
More files
Additional Information
| # | Message |
|---|---|
| 1 | "Warning! Database updated failed!
Database update failed! Outdated viruses database are not effective can???t guarantee adequate protection and security for your PC! Click here to get the full version of the product and update the database!" "Warning! Running trial version! The security of your computer has been compromised! Now running trial version of the software! Click here to purchase the full version of the software and get full protection for your PC!" |
I had trouble removing it your way. That program prevented me from opening my task manager, so I found an easier way to erase it completely by one button. I\'ll explain:
I opened my control panel and went under startup programs. I changed the tab to \"currently running programs\" and scrolled down. I found this Antispy Safeguard bullsh*t and clicked remove. Now everything it has prevented me from doing I am now able to have access to and I have not found any trace of a rogue program on my PC as of today. I just figured you would like to use this as an alternate way to erase this program in case anyone else is experiencing the same difficulties as I was.
michael i tried your way but it doent say remove i can just end the process and it will work but then if i restart or turn of the computer the AntiSpy Safeguard stills there and it does the same thing... it scans and doesnt let me go to internet =(
Thank you so much Michael. I came across the same problem and could not access my task manager. Your cmment helped a lot. Thank you again.
ran into same problem as Michael-could not open task master but my computer -Dell-must be older as Ido not have "startup programs". Any advice? Harrington
Thanks Mike,
Anybody having this problem, Michaels way worked for me as well.
I had this virus with Vista Home Premium OS. I had to go to adminstrative tools to show programs running. I deleted the operation and then found the downloaded files \"Free Movies\" publisher Mouskit AG which matched the name of the company of the program I had stopped. I cleared out my recylce bin to completely remove the software. I had tried to delete from the programs unistall and the install log file could not be found. My internet explorer programs are working again so the software seems to be gone. I\'ll know when I restart my computer.
ON ANOTHER COMPUTER THE ANTISPY SAFEGUARD WILL NOT LET ME CONNECT TO THE INTERNET VIA EXPLORER TO DOWN LOAD ANY PROGRAMS TO GET RID OF ANTISPY SAFEGUQARD. WHAT CAN I DO ?????????
THANKS DENNIS
I totally agree with Michael above. I was previously having the same trouble with not even being able to open task manager, but by following his method (which not only got rid of the virus, but did so far quicker than the method this website is suggesting would have) my laptop is running just as it was before. Thank you Michael for this information which proved hugely helpful to me! I would advise anyone to follow his lead and try this method first due to its speed and simplicity.
Michael,
I have the same problem. So I opened the control panel (Windows XP) . I did not find "Startup Programs" in control panel. Can you tell me where I can find startup program under control panel.
Nick
I have windows XP and I went to control panel. I did not find Startup program in the control panel. Please tell me how can I find start up program in control panel. I need to get rid of this Antispy Safeguard.
Nick
Microsoft should see to it that the Antispy Safeguard are prosecuted to the fulest extent of the law. Then fine the living hell out of them.
These guys are crooks, pure & simple.
It is beyond nt conprehension why Microsoft doesn't get on this immediately and put an end to it. These guys are very bad for Microsofts reputation.
noel wedder
I can\'t get to my Task Manager - When I go to my Control Panel > Change Startup Programs, I get a message that Windows Defender is turned off but the link to turn it back on just gives me an error message. I can\'t get online on my PC with the AntiSpySafeguard stops me from going any further - so I tried downloading SpyHunter removal software on my Mac - hoping to save it on my flash drive & able to run it on the PC - but it only went as far as 281 kb and got stuck... Any suggestions? Please.
it wont let me start task manager . i found the file but it wont let me delete it
It wouldn't let me start task manager due to the warning appearing and it wouldnt let me go on the internet sa i cant download any program against it.
i watched a video on youtube saying how to find it on your pc and i found it under the name ''hotfix'' but it wouldnt let me delete it .
Dear Michael,
I am experiencing the same problem.
I understand what you did,
I am using windows 7 (dutch)
When I right click on the startbutton I can change some settings, But there is no tab currently running programms
Thx for your answer
John
I don't find startup programs in the Control Panel. What am I doing wrong?
Thanks for your help.
Michael you are a genius and u saved my computer thank you so much
That is nice that it worked for you, but in XP, you can\'t get to startup programs from control panel, so for those users your explanation is useless.
I tried task manager but it blocks it i also tried control panel but do not see the start up progarams tab i have windows 7 may be it different can any one give me any sudjestions
thank you
Hiii
im having major probs with this AntiSpySafeuard 🙁 it conned me into thinking i had major viruses... thing is its on my mums laptop and she doesnt know cuz she will freak!
it keeps comin up saying 'safe start up' thats the only option you can click on, when i do, it says its performin a scan but when its finished it stays on the screen, even after you've removed it, the task bar or anythin doesnt come up so i cant do anythin! its drivin me mad, can anyone help?
Thanks to michael, i got it fixed. Been trying to get it to work for the longest time 🙂
Can you please help me. I can't find where you would change the tab to running programs in the control panel.
Thanks
Michael: Thank you, thank you, thank you. I looked at four websites with complicated explanations or software downloads for purchase. Your method worked... so easy.
After I ended the process under the "currently running programs" tab as you described, I was able to delete:
"user"\AppData\Roaming\hotfix.exe
"user"\AppData\Roaming\srsf.bat
"user"\AppData\Local\Temp\0.9236036790384962.exe
"user"\Desktop\mstsc.exe
All of these files were generated at the same exact time.
I rebooted in safemode, started "run", "Open: regedit" and deleted:
HKEY_CURRENT_USER\Softwre\Microsoft\WindowsNT\CurrentVersion\Winlogin "Shell" = "User"\Application Data\hotfix.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings"WarnOnPostRedirect"="0"
and "WarnonBadCertRecving"="0"
None of the other registers existed.
I rebooted in normal mode and all was solved.
Thanks again and also to this site.
ANTI SPY SAFEGUARD IS A SCAM. HAD A MICROSOFT WINDOW ADVISING I HAD A VIRUS. WANTED ME TO PAY 99.00 BY CREDIT CARD TO REMOVE. LOCKED MY INTERNET, TASK MANAGER, SYSTEM RESTORE. I HAD TO GET 9 TECHS FROMCYBER DEFENDER TECH SUOOORT 5 HOURS, TO FINALLY REMOVE.
Michael, can u please explain how you got to the "currently running programs" tab?
I can't open even my PC....when I opened it,, this spyware is running and I can't stop the process! I am trying to click the "continue unprotected" after it scanned the whole thing but I am left with a box saying: Personalized setting c:\windows\system32\winservice.exe
how i am suppose to have my pc running and remove it?? please help. thanks.
Dears,
I have stopped the AntiSpySafeguard by doing this:
1. Start - Run -> Browse to C:\WINDOWS\Regidit
2. Open the map: HKEY_CURRENT_USERS\Software\Microsoft\Windows\CurrentVersion
3. Delete the file: "WarnonBadCertReceving"
4. Delete the file: "WarnOnPostRedirect"
5. Open the map: HKEY_CURRENT_USERS\Software\Microsoft\Windows NT\CurrentVersion\Winlogon.
(Click with the right mouse on the file: "Shell" and then Modify. You see that the filename is "Hotfix.exe")
6. Delete the file: "Hotfix".
7 Restart your computer.
Succes !!!!!
Danny.
Hi! Thanks for sharing your comment I am having troubles with this f****** AntiSpy Safegaurd and I was wondering where I can find the 'startup programs' I've searched for it in the control panel but no sign, so please help me I really need to remove this s***
Thanks, your manual instructions worked for me. Got that bad boy off.
HI, on my laptop this fake spyware wont let me go online. so im using my main computer how do i get ride of it if it wont let me go online?
I CANT GET RID OF THIS ANTISPY SAFEGUARD I CANT ACCESS SYSTEM RESTORE ITS DRIVING ME MAD !!!! PLEASE HELP REGEDIT BEEN DISABLED BY YOUR ADMINISTRATOR ?
i don't see how your way works, either. there is no "currently running programs" choice in Windows control panel
I have windows 7 and there is nothing in my Startup folder. Is there another Startup programs location? How can it be done that way on Windows 7?
michael, where in the control panel is a icon labeled \" startup programs\" ... i am having the same problems, i have the antispy safeguard going on but i cant access my task manager to ride myself of it...please anyone help....thanks!
Can someone please help.I have antispy safeguard running and can't get rid if it.I tried to start in safe but it comes up in all the modes?? I don't know what to do next the darn thing is driving me crazy. Tks,Joe