SafePcAv
SafePcAv is another scam antivirus program designed to steal money from its innocent victim using deceiving tactics on the security of the computer. SafePcAv is unsafe and should be removed from computer immediately. Once inside the system, SafePcAv attempts to connect to a remote computer to download additional malware that will enhance its presence on the affected computer. Antivirus programs can be disabled by SafePcAv by ending its running process. SafePcAv Trojan also blocks Internet access particularly to security websites to prevent users from downloading any removal tool. Since it has no add/remove components during its installation, SafePcAv will force user to obtain the license copy of this software just to remove it from a computer.
| Type | Rogue |
| Sub-Type | FakeAV |
| Aliases | |
| OS Affected | Windows |
| Detected By | MalwareBytes |
What are the Symptoms of SafePcAv Infection?
A virus scan will run that will display fake results to attract users into purchasing SafePcAv activation key and serial.
It will modify Windows Registry and add the following entries:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “SafePcAv”
- HKEY_CURRENT_USER\Software\SafePcAv
- HKEY_LOCAL_MACHINE\SOFTWARE\SafePcAv
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SafePcAv
SafePcAv threat will drop the following malicious files:
- %Documents and Settings%\All Users\Desktop\SafePcAv.lnk
- %Documents and Settings%\All Users\Start Menu\Programs\SafePcAv
- %Documents and Settings%\All Users\Start Menu\Programs\SafePcAv\1 SafePcAv.lnk
- %Documents and Settings%\All Users\Start Menu\Programs\SafePcAv\2 Homepage.lnk
- %Documents and Settings%\All Users\Start Menu\Programs\SafePcAv\3 Uninstall.lnk
- %Program Files%\SafePcAv Software
- %Program Files%\SafePcAv Software\SafePcAv
- %Program Files%\SafePcAv Software\SafePcAv\SafePcAv.exe
- %Program Files%\SafePcAv Software\SafePcAv\main_config.xml
- %Program Files%\SafePcAv Software\SafePcAv\uninstall.exe
- %Temp%\[random].exe
- %WINDOWS%\system32\[random].exe
How to Remove SafePcAv Manually
1. Restart your computer in SafeMode
- After Power-On the computer, just before Windows start, press F8
- From the selections, Select SafeMode
2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
- Click Start > Run
- Type in the field, regedit
- Navigate and look for the registry entries mentioned above and delete if necessary
3. Delete malicious files that the threat added:
- Base on the given location above, browse and delete the file
- If no location is given, click Start>Search> and search for the files.
- If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.
4. Scan computer with Antivirus Program
- Update antivirus program
- Scan computer and delete all detected threats.
How to Easily Remove SafePcAv
1. Download and run Removal Tool to remove SafePcAv
Your PC Protector Paladin Antivirus