How to remove Windows Safety Maintenance
Friday, May 25th, 2012 at 3:37 amHome » Rogue Antispyware » Windows Safety Maintenance
Windows Safety Maintenance description
Windows Safety Maintenance is a fake system tool. It presents itself as a security program, but the program is actually fraudulent. Windows Safety Maintenance is able to mimic Windows Firewall. Avoid the trap and do not pay for Windows Safety Maintenance services.
Although Windows Safety Maintenance looks like antimalware, it’s actually useless. It is only able to imitate some actions and warnings of the real security programs. Windows Safety Maintenance pop-ups do not represent any real information: the alerts are made-up long before the fraud infects a PC.
Here are some examples of the falsified alerts:
Error
Trojan activity detected. System data security is at risk.
It is recommended to activate protection and run a full system scan.
Warning
Firewall has blocked a program from accessing the Internet
C:\program files\internet explorer\iexplore.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Windows Safety Maintenance is a Rogue Antispyware software
How to manually remove Windows Safety Maintenance
To remove Windows Safety Maintenance spyware you must block Windows Safety Maintenance sites, stop and remove processes, unregister DLL files, search and delete all other Windows Safety Maintenance files and registry utility. Follow the Windows Safety Maintenance detection and removal instructions below.
The most typical software removal method is to remove Windows Safety Maintenance by using "Add or Remove Programs" service. However there may be hidden Windows Safety Maintenance files, running processes and registries in your computer, so Windows Safety Maintenance may recreate all other files after reboot.
Windows Safety Maintenance manual removal instructions
Stop and remove Windows Safety Maintenance processes:
[3 random symbols].exe
[4 random symbols].exe
Read more how to kill Windows Safety Maintenance processes
Locate and delete Windows Safety Maintenance registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "u_2012-5-24_6"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "knwhxtvfmd"
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\advxdwin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BDSurvey.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ifw2000.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nmain.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SafetyKeeper.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\titaninxp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wscfxas.exe
Read more how to delete Windows Safety Maintenance registry entries
Download RegistryBooster 2010 to scan errors caused by Windows Safety Maintenance
Search and unregister Windows Safety Maintenance DLL libraries:
NPSWF32.dll
Read more how to unregister Windows Safety Maintenance DLL files
Detect and delete other Windows Safety Maintenance files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[3 random symbols].exe
%AppData%\Protector-[4 random symbols].exe
%AppData%\result.db
%CommonStartMenu%\Programs\Windows Safety Maintenance.lnk
%Desktop%\Windows Safety Maintenance.lnk
We strongly recommend you to use spyware remover to track Windows Safety Maintenance and automaticaly remove Windows Safety Maintenance processes, registries and files as well as other spyware threats.


