print version

SafeFighter

For Information and Removal of SafeFighter

SafeFighter

With names like SafeFighter and Total Security, rogue antivirus programs hope to convince computer users of their legitimacy.  They use warning messages and false scan results that mimic those of reputable programs in order to impart a sense of authenticity.  But these programs do not actually protect your computer and may be the cause of some issues you have been noticing, including slow performance and pop-up ads. 

What is SafeFighter?

SafeFighter or Safe Fighter is one in a long line of rogue antivirus programs in the WinSoft family.  Its brothers include Trust Cop, Secure Fighter, Secure Warrior, SecureVeteran, SecureSoldier, and SecurityFighter.  They go by different names but the goal of each one is the same: to persuade computer users to buy their software.  Using pop-up ads and false security messages and scan results, they hope you will be convinced that there are severe risks to your system.  SafeFighter ads will tell you that this is the only program that can resolve the issues so your computer is not compromised.  Unfortunately, your wallet is compromised; there really is no protection. 

Is SafeFighter In My System?

SafeFighter enters your system and immediately sets out to copy itself and bury itself in your system registry.  It goes through a dormancy stage at first, which allows it to evade detection by security programs.  And because it is not a virus, it is quite unlikely that your security program will pick it up.  You will begin to notice several changes when the rogue program becomes active. 

Your computer will slow.  Tasks that were once quick take much longer, such as booting up, opening programs, or switching between browser windows.  SafeFighter begins "working" or running its simulated scans as soon as you start your computer.  This continues in the background the entire time the computer is on, which causes everything else to slow down.  This also helps convince you that there are really security risks present. 

In addition, SafeFighter can take over your browser settings and hijack your homepage.  You will be diverted to a rogue website and urged to buy the full version of this rogue program.  This is also why SafeFighter installs new shortcuts on your desktop and icons on your system tray.  If you click on them, you will be taken to a site and told that SafeFighter is the only answer to your security issues. 

Perhaps most noticeable, though, are the pop-ups.  These are designed to look like those from your legitimate security program, and their purpose is to persuade you that your machine is at risk.  It also mimics a message from Windows Security Center.  How do you tell the difference between the real Security Center and a rogue?  The legitimate Security Center tells you whether your computer is protected or not.  The rogue will try to persuade you to buy something.

The scan result window is identical to those issued by TrustFighter and others in the WinSoft family.  Leaning how to spot these rogues will help you protect your computer.  The name "SafeFighter" appears in the upper right corner with the logo, "Help Protect Your PC."  It is accompanied by a symbol that looks like three interconnected rings.  It indicates that it has done a scan and found several security risks.  This number is usually quite high; SafeFigther claims to find hundreds of threats.  You then have the option of registering and removing the threats with SafeFighter.

If you opt to do this, you will be directed to the website.  You will also be directed there if you click on any component of the ad, even the X to close it.  Close this window with the task manager. 

How Did SafeFighter Get Into My System?

SafeFighter advertises on legitimate websites, and you may find its website while searching for security tools or updates.  Many people are convinced of its legitimacy and opt to purchase the "full version."  As they find out, this does not offer any protection for their computer, and they cannot get their money back. 

But what if you didn't download and install SafeFighter yourself?  Why is it on your computer?  You have the "free" version.  This free version brings with it pop-ups, false scans, and hijacked settings.  The full and free versions are the same.  Neither one can protect your computer, and you will not see improved performance or a reduction in pop-ups if you do purchase the program.  The free version came into your system with a Trojan.  These are common online, especially on sites with gaming, warez, adult, and gambling content.  It is possible to pick one up by clicking on an ad, downloading a video or image, or simply visiting an affected site. 

A common route for Trojans to come in is through free videos.  A Trojan known as Zlob masks itself as a video codec, which you need to download and play the video.  Zlob enters when you download the video and drops SafeFighter and other malware into your system. 

How Do I Remove SafeFighter?

If you suspect you have SafeFighter in your system, it is important to take immediate steps to remove it.  Because rogue antivirus programs are not viruses, it is not effective to simply use the delete option or run your current antivirus scan.  Rogues are designed to evade these basic options.  This leaves you with two options.  The first is automatic removal with a reputable program, and it is recommended for everyone.  Malwarebytes Anti-Malware (Malwarebytes has free malware removal) is a good choice because it has been designed specifically for rogue programs like SafeFighter.  It will detect and remove all traces of the rogue program.  All you have to do is download it and follow the directions.

The other option is more complex.  If you have technical experience, you can manually remove it.  Be cautious to remove each and every associated file and do not inadvertently delete a necessary file.  This is only recommended for those with extensive technical skill and knowledge.  The following direction will help you remove SafeFigther:

Block Site:

safefighter.com

Stop Processes:

13571sp5mbot6e9z.exe
105bs9ezl2345.exe
SafeFighter.exe
uninstall.exe
1aa456a.exe

Delete Registry Entries:

HKEY_CURRENT_USERSoftwareSafeFighter
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallSafeFighter
HKEY_LOCAL_MACHINESOFTWARESafeFighter
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "1aa456a.exe"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "SafeFighter"

Delete Files:

c:Documents and SettingsAll UsersDesktopSafeFighter.lnk
c:Documents and SettingsAll UsersStart MenuProgramsSafeFighter
c:Documents and SettingsAll UsersStart MenuProgramsSafeFighter1 SafeFighter.lnk
c:Documents and SettingsAll UsersStart MenuProgramsSafeFighter2 Homepage.lnk
c:Documents and SettingsAll UsersStart MenuProgramsSafeFighter3 Uninstall.lnk
%Temp%1aa456a.exe
c:Program FilesSafeFighter Software
c:Program FilesSafeFighter SoftwareSafeFighter
c:Program FilesSafeFighter SoftwareSafeFighterSafeFighter.exe
c:Program FilesSafeFighter SoftwareSafeFighteruninstall.exe
c:WINDOWS10450tr9j4z5.ocx
c:WINDOWS10516hacktzol9f5.bin
c:WINDOWS105bs9ezl2345.exe
c:WINDOWSsystem32135095irusaz9.bin
c:WINDOWSsystem3213571sp5mbot6e9z.exe
c:WINDOWSsystem3213658tro9536z.ocx

Removing SafeFighter Automatically/Safely

For free automatic removal we recommend using Malwarebytes Anti-Malware. This program is widely recommended by reputable third-party sites, so you can be reasonably confident of its ability to safely get rid of SafeFighter and any hidden Trojans. As a precaution we recommend double checking your system with Spyware Doctor. This program requires paid registration to enable deletions, however it has a money back guaranteed and is the top of the line in malware removal. It should catch malware that evades Malwarebytes and block anything that tries to reinstal itself.

Remove SafeFighter Now:

1. Download and install Malwarebytes Anti-Malware and Spyware Doctor  
2. Run a scan with Malwarebytes Anti-Malware.
3. Remove all the detected infections (free).
4. Run a scan with Spyware Doctor
5. Remove any remaining infections
6. Reboot and rescan with Spyware Doctor. Your computer should now be clean.

Important note: If Malwarebytes is blocked by malware then run Chameleon (Start Menu → All Programs → MalwareBytes' Anti-Malware → Tools → Malwarebytes' Anti-Malware Chameleon). If you need further help removing SafeFighter please email us at info@removeadware.com.au or call for personal assistance on toll-free number 888-655-3453, within the USA and Canada.

 to top