How to Remove SafeFighter | Safe Fighter Removal Guide
SafeFighter is a rogue antivirus application in the same family as TrustCop (TrustCop Removal Guide), SecureWarrior (SecureWarrior Removal), SecurityFighter (SecurityFighter Removal), SecuritySoldier (SecuritySoldier Removal) and it also has gone under other names. It is a rogue application because it installs through either web popups or trojan horse activity, makes false claims that your system is infected with viruses or other security problems. It further claims that it will fix those problems if you purchase the software. Since the problems are all falsified, you may as well take your money out and set fire to it for all the good it will do. Read on for how to remove safefighter.
So, the first thing I would suggest you do is download and install malwarebytes antimalware from my virus removal toolkit page. It is just about the best free malware removal software out there. (Nothing comes to mind as better – I’ve seen some recommend superantispyware – but malwarebytes has been good for me…)
You may not be able to install and run it with this software on your system. You may have to employ one of the following tricks to make it install: 1) rename the install file from mbam.exe to somethingelse.exe (your pick really). 2) reboot and install/run in safe mode. 3) try starting with a manual removal as described below and after you remove safefighter and it’s running processes from memory then try again to install, update and run malwarebytes antimalware. Usually it’s enough to kill off the running processes related tot he pest.
Block the following site related to SafeFighter:
safefighter.com
If you are network administrator you may make life easier by blocking the above site. (You may not have to deal with safefighter removal then…)
The following are running processes from SafeFIghter, for removal of safefighter you should disable these processes in task manager. Kill them off to aid in a further automated Safefighter removal with malwarebytes or continue on past for further information you will need for manual removal:
13571sp5mbot6e9z.exe
105bs9ezl2345.exe
SafeFighter.exe
uninstall.exe
1aa456a.exe
Three of the above files have been randomized and you will likely find different names on your system. Use the patterns that you see here as an example to help you find the rogues files on your system. The information below may also help you find and remove the safefighter files.
The following files and folders should be deleted for safefighter removal:
%docs%\All Users\Desktop\SafeFighter.lnk
%docs%\All Users\Start Menu\Programs\SafeFighter
%docs%\All Users\Start Menu\Programs\SafeFighter\1 SafeFighter.lnk
%docs%\All Users\Start Menu\Programs\SafeFighter\2 Homepage.lnk
%docs%\All Users\Start Menu\Programs\SafeFighter\3 Uninstall.lnk
%progfiles%\SafeFighter Software
%progfiles%\SafeFighter Software\SafeFighter
%progfiles%\SafeFighter Software\SafeFighter\SafeFighter.exe
%progfiles%\SafeFighter Software\SafeFighter\uninstall.exe
%win%\10450tr9j4z5.ocx
%win%\10516hacktzol9f5.bin
%win%\105bs9ezl2345.exe
%win%\system32\135095irusaz9.bin
%win%\system32\13571sp5mbot6e9z.exe
%win%\system32\13658tro9536z.ocx
%tmp%\1aa456a.exe
Many of the above files have randomized components to their names and so you should use the template that you see above and search on your system for files that may show similarities. After you have completed a manual removal of safefighter (even if you have found ALL the analogous files) I would install, update and run malwarebytes antimalware as well as a trusted antivirus product to make sure that your removal is complete. (Also it’s good to see a couple reboot cycles to ensure that the hydra doesn’t resprout…)