Another trick used by APc Safe is fake Security Center windows (see image below) that looks like the legitimate Windows Security Center except that the legitimate one doesn't promote any anti-virus software. Whereas the fake one states that your computer is not protected and recommends buying APcSafe. Everything else is almost identical. Inexperienced users probably won't even notice the difference. We also have to say, that this virus may block anti-virus software and hijack your web browser (usually Internet Explorer). Most of the time it will take you to fake websites or to the home page of this virus: apcsafe.com (don't open that website, it contains viruses).
The most important question of course is how to remove APcSafe? That can be done either manully or with an anti-spyware application. However, note that this virus will likely install additional malware such as Trojans and rootkits. That's why we strongly recommend you to use at least one of these legitimate anti-spyware applications listed bellow:
Download HijackThis tool. (NOTE: before saving it to your dekstop, rename HijackThis.exe to explorer.exe)
Launch HijackThis and click 'Do a system scan only' button. Select the following entries from the scan results:
O4 – HKLM\..\Run: [APcSafe] C:\Program Files\APcSafe Software\APcSafe\APcSafe.exe -min
O4 – HKCU\..\Run: [[random].exe] C:\WINDOWS\system32\[random].exe
Close all open programs and click "Fix Checked" button. Exit HijackThis.
Then download TDSSKiller and save it to your desktop. Extract archive and launch TDSSKiller tool. Follow the prompts. This tool will remove Trojans that block legitimate software.
Reboot your computer in "Safe Mode with Networking" and run them from there. How to do that: http://www.computerhope.com/issues/chsafe.htm
Manual APcSafe removal:
1. Open Task Manager and terminate these procsses: APcSafe.exe, [random].exe
2. Delete the following files and folders:
C:\Program Files\APcSafe Software
- C:\Documents and Settings\All Users\Start Menu\Programs\APcSafe
- C:\Documents and Settings\comp\Local Settings\temp\00002e99
- C:\Documents and Settings\All Users\Start Menu\Programs\APcSafe\