Windows safety tweaker is a dangerous antivirus that pretends to be lawful and justifiable in cleaning virus-affected files. It even looks trustworthy and useful for keeping it in your computer system, but in fact, it does nothing, but takes full control of your computer system without any permission from the user. It then displays false reports about the virus attack on your computer system and generate fake security alerts. One should not believe on Windows safety tweaker in any case, as it is just a cheap trick played by the rogue application to get the user’s attention and then to ask them to buy the software. Just like other rogue applications, it spreads through the Trojans and spam email attachments.

Once your computer is under the control of these applications, you can do nothing to protect it unless you remove its files completely. To remove the Windows safety tweaker files completely, you need to be completely aware of all the process and file names that are used by the fake application and you must know how to remove them. If you do not have the required know-how about how to remove the Windows Safety Tweaker, read on. The following article will help you easily understand the entire process.

Remove Windows Safety Tweaker processes:

  1. Use your computer in Safe mode with networking and then open the task manager by pressing the CTRL+SHIFT+ESC keys at a time, or you can do it the other way by clicking on the Start button then selecting the option ‘Run’ and type taskmgr in the bar named ‘open’ and press enter.
  2. Choose the tab named ‘Processes’ and find the required process under the column ‘image name’.
  3. Click on the process and select the option ‘End process’ this will delete the process.
  4. The processes that you need to find out in the column ‘image name’ are:

Inspector[random].exe

Protector-[3 random characters].exe

Remove Windows Safety Tweaker DLL files:

  1. Go to Start then click on the Search.
  2. Find the option ‘For files and folders’ and go with the option.
  3. Type the file name ‘npswf32.dll’ and select enter.
  4. When the result is found right click on it and click on the Delete option.

Remove Windows Safety Tweaker Registry Entries:

  1. Click on Start then select the option Run.
  2. To open registry editor type regedit and click Ok.
  3. From the two panes in the registry editor use the left pane in registry editor and click on the option edit. Then click on Find type in the registry values.
  4. Right click on the registry values and select the option Delete.

The registry values that you need to delete are:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-3-11_2″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “origkboryd”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\atcon.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bipcp.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ecengine.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\infwin.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PavFnSvr.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sahagent.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\titaninxp.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wsbgate.exe

Remove Windows Safety Tweaker files:

Follow the same steps as discussed in ‘Remove Windows Safety Tweaker processes’ and find out the following processes then select the option ‘End processes’.

%AppData%\NPSWF32.dll

%AppData%\Protector-[random 3 characters].exe

%AppData%\result.db

%CommonStartMenu%\Programs\Windows Safety Tweaker.lnk

%Desktop%\Windows Safety Tweaker.lnk

 

How to remove Windows Safety Tweaker?
Tagged on:         

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>