sâmbătă, 27 aprilie 2019

Safety Anti-Spyware Rogue FakeRean

Safety-Antispyware is a rogue antispyware program issuing that he is from fakerean and he is first than Winpcdefender.
The file is hidding itself and copy install itself to program files.
When loaded he show a red interface infected malware
Interface may look like that :
His threats detected are win32.i.1.2.3 and most :
His payloads only one :
His fakerean behavior is showing every 10 minutes or high also seen this warning on Winpcdefender xp deluxe protector WinPC Antivirus and more
If we try to turn off and on :

Is told us lore to get full version :
If we click no or if we ignore activation i am unprotected by spyware :
 And showing that pop up on taskbar the icon also seen by other rogues IE-Defender Files-Secure etc.
All protection level low grammar errors :(
Image of red Low :

The Activation :
 Not Fair the activation regcode and registry hack i should use a debug or pe explorer to get a key.
After i put a correctly code : is 12345
Is making me to put a valid email fake or rean including the "@" aol symbol.
 Finally activated with a fake email and registration key : rafael@safetyantispywareshop.com
Key 12345
Once Restarted on fullversion the registry is random but the GUI interface is changed into green :
Anything Enabled :
 Turned on Everything and subscription updated Fake


 The privacy control.Also once the threats are detected they are removed easy and we unlocked Exit safetyantispyware
Finally i uninstalled this fakeantivirus from control panel and uninstalled from recyclebin using a batch file. But the main program is attrib to be hidden

I see that folder on recycle bin and i can remove this program and registry when is needed.
He still have a safetyantispyware 3
Filename detalis :
SafetyAntiSpyware3.exe
MD5 : 848aea51e9d26089982c9b820c2ea4ba
AV RESULTS :
MS : Rogue:Win32/FakeRean
Kapersky Trojan.Win32.Inject.alyb
Eset : Adware.Safetyantispyware
I explorer that rogue since 2018 :
Thanks Virusshare for confirmation :
Video Demonstration and Review : 


  Activation :
Imagine how easy code simple but naive users spent money on this software rogue :D