Windows Safety Master

Also Known As: Windows Safety Master Rogue
Type: Fake Antivirus
Damage level: High
Distribution: High
Damage Level

Windows Safety Master removal instructions

Windows Safety Master is a rogue antivirus program that generates fake security warning messages and indicates fake security infections to scare PC users into purchasing it's full version. This program is created by Cyber criminals who are using infected email messages, malicious websites, and fake online security scanners to distribute this bogus software. After successful infiltration Windows Safety Master modifies the registry entries of an infected operating system by setting itself to start automatically on every system startup, blocking execution of installed software (including antivirus programs and Internet browsers) and disabling Windows task manager. This program doesn't have a virus definition database nor a virus scan engine, it indicates the same security infections on every PC that it infiltrates.

Right after the fake security scan Windows Safety Master prompts users into activating it's "ultimate protection" (buying a full version of this program) to remove the supposedly detected security infections. PC users should know that paying for the license key of this program would equal to sending one's money to Cyber criminals, user's would lose their money and their computers would remain infected with a fake antivirus software. Users who have already payed for this program should contact their credit card company and dispute the charges explaining that they have been tricked into buying a fake antivirus program. This rogue antivirus program originates from a family of fake security scanners called FakeVimes. PC users shouldn't trust this program; it's a total scam.

Windows Safety Master fake antivirus program

Windows Safety Master is identical to it's previous variants which were named Windows Ultimate BoosterWindows Efficiency Kit and Windows Prime Accelerator. Cyber criminals don't bother changing the looks or the functionality of these programs, the only difference is their names. Most commonly Cyber criminals who are responsible for releasing these rogue antivirus programs are using fake online security scanners to trick unsuspecting PC users into downloading their bogus software. Internet users should know that such pop-up messages are a scam used in the distribution of fake antivirus software. Computer users who have noticed Windows Safety Master scanning their computers for security infections should ignore this program and use the provided removal guide to eliminate it.

Windows Safety Master blocking execution of Internet browsers:

Windows Safety Master generating fake security warning messages

Windows Safety Master removal:

Complete these steps to access your desktop:

1. Wait until Windows Safety Master finishes it's fake security scan and click "Settings" (at the top of the main window).

Windows Safety Master accessing settings tab

2. Select "Allow unprotected Startup."

Windows Safety Master enabling unprotected startup

3. After selecting "Allow unprotected Startup," close Windows Safety Master.

4. Access "My Computer" - double click on "My Computer" icon.

Windows Safety Master accessing My Computer

5. Navigate to C:\Users\[YOUR USER NAME]\AppData\Roaming

Windows Safety Master accessing appdata

6. Locate a file named "svc-[random letters].exe" and click your right mouse button over this file.

Changing the name of Windows Safety Master executable file step 1

7. In the opened menu select "Rename". Change the file name of "svc-[random letters].exe" to "fake.exe".

Changing the name of Windows Safety Master executable file step 2

8. After renaming "svc-[random letters].exe" file restart your computer. Next time the operating system boots Windows Safety Master will be inactive and won't block access to Internet.

6. Download legitimate anti-spyware software to completely remove this rogue antivirus program from your computer.

remover for Windows Safety Master

By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. All the products we recommend were carefully tested and approved by our technicians as being one of the most effective solutions for removing this threat.

If you can't download or run the spyware remover try running registry fix (link below). It enables execution of programs. Download registryfix.reg file, double click it, click YES and then OK.

Windows Safety Master removal using a registry key:

1. Click on a question mark icon (at the top of the main window of Windows Safety Master) and select "Register".

Registering Windows Safety Master step 1

2. In the opened window enter this registry key: 0W000-000B0-00T00-E0001

Registering Windows Safety Master step 2

3. After entering this registry key Windows Safety Master will pretend to remove the previously detected security threats and will allow execution of installed programs. Notice that entering this registration key will not remove this rogue antivirus program - it will make the removal process less complicated.

Windows Safety Master after registration

4. Download legitimate anti-spyware software to completely remove Windows Safety Master from your computer.

remover for Windows Safety Master

Windows Safety Master removal using Safe Mode with Networking:

Step 1

Windows XP and Windows 7 users: During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.

Starting Windows in Safe mode with networking

Video showing how to start Windows 7 in "Safe Mode with Networking":

Video showing how to start Windows XP in "Safe Mode with Networking":

Step 2

Remove proxy settings from Internet Explorer. This rogue antivirus adds a proxy to user's Internet connection settings to show various errors when user tries accessing the Internet. To remove proxy settings: Open Internet Explorer and click on the gear icon. In the opened menu select "Internet Options."

Removing proxy setings from Intenret Explorer step 1

In the opened window select "Connections" tab.

Removing proxy settings from Internet Explorer step 2

In the "Connections" tab, click on "LAN settings".

Removing proxy settings from Internet Explorer step 3

If "Use a proxy server for your LAN" is checked, uncheck it and click OK.

Removing proxy settings from Internet Explorer step 4

Step 3

Download legitimate anti-spyware software to completely remove this fake antivirus program from your computer.

Step 4

After removing this rogue software, you should reset one's Hosts file. Don't skip this step, Windows Safety Master modifies your Hosts files, and you will encounter browser redirect problems if malicious entries will not be eliminated.

Hosts file is used to resolve some canonical names of websites to IP addresses. When it's modified users may be redirected to malicious websites while still seeing a good URL in the address bar. To fix this, please download Microsoft Fix It tool, it restores one's hosts file to Windows default. Run this tool when downloaded and follow the on-screen instructions. Download link below:

Other tools known to remove Windows Safety Master:


#2 admin 2014-02-08 07:21
Hi Jody, these fake antivirus are poorly programmed so such behavior is typical. Try clicking on "prevent attack" button or restarting your computer.
#1 Jody Price 2014-02-07 21:26
I want to remove this Windows Safety Master but I can't even begin with your first step. Once the box pops up about the firewall blocking a program, that small box is in the bottom right hand corner of my screen. The other window where I could choose Settings is basically shadowed out and I can't do anything. Any suggestions?
About the author:

I am passionate about computer security and technology. I have an experience of 10 years working in various companies related to computer technical issue solving and Internet security. I have been working as an editor for since 2010.

Follow me on Google+ to stay informed about the latest online security threats.

Our malware removal guides are free. However, if you want to support us you can send us a donation.