Windows Safety Master
Written by Tomas Meskauskas
Damage level: High
Windows Safety Master removal instructions
Windows Safety Master is a rogue antivirus program that generates fake security warning messages and indicates fake security infections to scare PC users into purchasing it's full version. This program is created by Cyber criminals who are using infected email messages, malicious websites, and fake online security scanners to distribute this bogus software. After successful infiltration Windows Safety Master modifies the registry entries of an infected operating system by setting itself to start automatically on every system startup, blocking execution of installed software (including antivirus programs and Internet browsers) and disabling Windows task manager. This program doesn't have a virus definition database nor a virus scan engine, it indicates the same security infections on every PC that it infiltrates.
Right after the fake security scan Windows Safety Master prompts users into activating it's "ultimate protection" (buying a full version of this program) to remove the supposedly detected security infections. PC users should know that paying for the license key of this program would equal to sending one's money to Cyber criminals, user's would lose their money and their computers would remain infected with a fake antivirus software. Users who have already payed for this program should contact their credit card company and dispute the charges explaining that they have been tricked into buying a fake antivirus program. This rogue antivirus program originates from a family of fake security scanners called FakeVimes. PC users shouldn't trust this program; it's a total scam.
Windows Safety Master is identical to it's previous variants which were named Windows Ultimate Booster, Windows Efficiency Kit and Windows Prime Accelerator. Cyber criminals don't bother changing the looks or the functionality of these programs, the only difference is their names. Most commonly Cyber criminals who are responsible for releasing these rogue antivirus programs are using fake online security scanners to trick unsuspecting PC users into downloading their bogus software. Internet users should know that such pop-up messages are a scam used in the distribution of fake antivirus software. Computer users who have noticed Windows Safety Master scanning their computers for security infections should ignore this program and use the provided removal guide to eliminate it.
Windows Safety Master blocking execution of Internet browsers:
Windows Safety Master removal:
Complete these steps to access your desktop:
1. Wait until Windows Safety Master finishes it's fake security scan and click "Settings" (at the top of the main window).
2. Select "Allow unprotected Startup."
3. After selecting "Allow unprotected Startup," close Windows Safety Master.
4. Access "My Computer" - double click on "My Computer" icon.
5. Navigate to C:\Users\[YOUR USER NAME]\AppData\Roaming
6. Locate a file named "svc-[random letters].exe" and click your right mouse button over this file.
7. In the opened menu select "Rename". Change the file name of "svc-[random letters].exe" to "fake.exe".
8. After renaming "svc-[random letters].exe" file restart your computer. Next time the operating system boots Windows Safety Master will be inactive and won't block access to Internet.
6. Download legitimate anti-spyware software to completely remove this rogue antivirus program from your computer.
If you can't download or run the spyware remover try running registry fix (link below). It enables execution of programs. Download registryfix.reg file, double click it, click YES and then OK.
Windows Safety Master removal using a registry key:
1. Click on a question mark icon (at the top of the main window of Windows Safety Master) and select "Register".
2. In the opened window enter this registry key: 0W000-000B0-00T00-E0001
3. After entering this registry key Windows Safety Master will pretend to remove the previously detected security threats and will allow execution of installed programs. Notice that entering this registration key will not remove this rogue antivirus program - it will make the removal process less complicated.
4. Download legitimate anti-spyware software to completely remove Windows Safety Master from your computer.
Windows Safety Master removal using Safe Mode with Networking:
Windows XP and Windows 7 users: During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.
Video showing how to start Windows 7 in "Safe Mode with Networking":
Video showing how to start Windows XP in "Safe Mode with Networking":
Remove proxy settings from Internet Explorer. This rogue antivirus adds a proxy to user's Internet connection settings to show various errors when user tries accessing the Internet. To remove proxy settings: Open Internet Explorer and click on the gear icon. In the opened menu select "Internet Options."
In the opened window select "Connections" tab.
In the "Connections" tab, click on "LAN settings".
If "Use a proxy server for your LAN" is checked, uncheck it and click OK.
Download legitimate anti-spyware software to completely remove this fake antivirus program from your computer.
After removing this rogue software, you should reset one's Hosts file. Don't skip this step, Windows Safety Master modifies your Hosts files, and you will encounter browser redirect problems if malicious entries will not be eliminated.
Hosts file is used to resolve some canonical names of websites to IP addresses. When it's modified users may be redirected to malicious websites while still seeing a good URL in the address bar. To fix this, please download Microsoft Fix It tool, it restores one's hosts file to Windows default. Run this tool when downloaded and follow the on-screen instructions. Download link below:
Other tools known to remove Windows Safety Master: