
| Aliases | [Kaspersky] not-a-virus:FraudTool.Win32.Delf.m | ||
|---|---|---|---|
| Typical Symptoms | Unable to delete the files,POP-UP Window,Unable to delete program,Install fake Anti-Virus | ||
| Discovered | [korea] 2009-12-30 [Foreign] 0000-00-00 |
||
| Type | Adware | ActiveField | |
| Damage/Distribution | ![]() ![]() |
||
| Origin | others | Encryption | NO |
| Target of infection | Installed with Aplicatoin,Execution | ||
| Scan engine needed |
2009-12-30 [Able to detect & repair]
|
||
[Symptom of Infection] [Adware.SafetyCenter.R] is installed without user agreement, and it is an Adware that induces users to purchase/register the fake AntiVirus by showing the exaggerated warnings. [PIC 1] Main Feature
[PIC 2] Scan Feature
[PIC 3] Register
[PIC 4] Warning 1
[PIC 5] Warning 2
[PIC 6] Warning 3
[Adware.SafetyCenter.R] creates files like below. (User Account Folder)\My Documents\(Random Name).exe (User Account Folder)\My Documents\(Random Name).dll <Registry> [Adware.SafetyCenter.R] creates registries like below. HKLM\SOFTWARE\SafetyCenter HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce Name: SafetyCenter Value: " -startup" |
[How to repair]
1. If you are WinXP/ME users, please be inactivate System Recovery Function.
|