SafeHome Site.com: SafeHomeSite.com
May 1st, 2008 | Posted in Browser Hijackers, Rogue Anti Spyware, Safe Home Site .com, Safe HomeSite.com, SafeHome Site.com, SafeHomeSite.comSafeHomeSite.com Threat Level: 
SafeHomeSite.com is browser hijacker that changes your home page to SafeHomeSite.com. Like its twin PureSafetyHere.com, SafeHomeSite.com sells rogue anti-spyware, such as WinSpyKiller and AntiSpyware Shield. SafeHomeSite.com runs its a fake security scan and launches popups, telling you you’re infected with W32.Myzor.FK@yf. This SafeHomeSite.com popup reads:
Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations [SIC]: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.
Always keep a healthy skepticism would be a better recommendation.
You’re not infected with W32.Myzor.FK@yf: you’re infected with SafeHomeSite.com. And the only thing SafeHomeSite.com and its rogue anti-spyware removes is money from your pockets.
So remove SafeHomeSite.com.
Read more about SafeHomeSite.com »



