safewin.exe - Useless

safewin.exe

Manual removal instructions:

safewin.exe
PWSteal.Focosenha is a Trojan horse program that attempts to steal user names, passwords, and other information from the infected computer.
Logs keystrokes and captures background images when the address bar in Internet Explorer contains predetermined URLs.
The keystrokes are saved in:
%Windir%\MSN\LogMedia.TXT
The captured images are saved in the directory:
%Windir%\MSN\DAT
Sends LogMedia.TXT and image files stored in %Windir%\MSN\DAT to a predetermined email address.

Manual removal:
Navigate to the key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
and delete the value: "Safe"="C:\Windows\MSN\SafeWin.exe"
Navigate to and delete the key: HKEY_CURRENT_USER\SafeMode

Remove safewin.exe now!

Reviewed by:

by

safewin.exe Dangerous Rating: 5 out of 5

Jeff's Story:

My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.

I sought a solution on the Internet and discovered your product and tried out the trial of UnHackMe.

You quickly found the rootkit and SAVED my PC!

I haven't had any problems since, and I'm extremely grateful.