Windows Safety Series is an illegal rogue application that pretends to be legal. It is designed by computer hackers to steal your important information without you being aware of it. The Windows Safety Series displays various fake scan results, pop-up security messages, whenever you try to do something. It tricks the users by making them believe that their system is badly infected with viruses and they should buy the Windows Safety Series instantly to clean their system. All the files that are shown in the scan results do not even exist in your system, so it is not true that Windows Safety Series is trying to protect you from viruses. We recommend you to remove the malicious program manually so that it is removed completely before it damages your computer any further.

Remove Windows Safety Series processes

  1. To quickly and directly open the windows task manager, press the short cut keys CTRL + Shift + ESC together.
  2. Or you can also open it manually by clicking on start, and then on Run.
  3. Type taskmgr in the Run and press Ok.
  4. There will be many tabs at the top of the windows task manager windows.
  5. Select the tab which is called ‘processes’.
  6. Find the Windows Safety Series process there, which is Protector-[rnd].exe; it will be under the field ‘image name’.
  7. If you are having difficulty in finding the required process, remember all the processes are arranged alphabetically.
  8. Right click on the required process and press the button ‘Delete’ to stop the Windows Safety Series process from working.

Remove Windows Safety Series registry key values

  1. Open Run using above mentioned steps.
  2. Enter regedit there and click Ok to open the registry editor.
  3. There will be two sections in the registry editor; you will need to go in the right most section of the registry editor.
  4. Click on the option edit from the file menu at the top of the registry editor window.
  5. Now select the option. Find write down the Windows Safety Series registry key values in the given space and press enter.
  6. Right click on the found registry values and Press Delete.

The Windows Safety Series process registry values are:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorAdmin” = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorUser” = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “EnableLUA” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “u_2012-5-24_6″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “knwhxtvfmd” HKEY_CURRENT_USER\Software\ASProtect

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\advxdwin.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BDSurvey.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ifw2000.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nmain.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SafetyKeeper.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\titaninxp.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wscfxas.exe

Remove Windows Safety Series other files

  1. Open Run.
  2. Type cmd and press Ok.
  3. When the command prompt opens, enter the complete path of the Windows Safety Series file and press enter.
  4. When the required file is found, type “regsvr32 /u SampleName.exe” and replace SampleName.exe with the following file names:

%AppData%\Protector-[rnd].exe

%AppData%\NPSWF32.dll %AppData%\Protector-[random].exe %AppData%\result.db

%CommonStartMenu%\Programs\Windows Safety Series.lnk %Desktop%\Windows Safety Series.lnk

How to remove Windows Safety Series?

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>