Friday, May 18, 2012

Remove Windows Pro Safety Release as a set of popups that ape antivirus

Windows Pro Safety Release does not detect infections even on the surface. It is an absolute fake, a set of popups, which ape visual aspects of computer inspection for viruses.
There is no actual process of detecting threats. All the popups are prepared in advance and are shown in random. That is why two different machines might get two different sets of threats reported by the counterfeit.
All other characteristics would remain uniform though. The rogue always amends system registry to enable its early startup, where possible – immediately upon system launching. When running, it shows double misleading alerts. Firstly, those are popups of deceptive content; secondly, they use graphical elements retrieved from valid software products, mostly Windows and related utilities.
Remove Windows Pro Safety Release and ignore its threat reports as misleading.
Click here to start free scan and get rid of Windows Pro Safety Release malicious adware in the skins of a computer security tool.

Windows Pro Safety Release screenshots:




Windows Pro Safety Release may generate and show the following popup alerts:
Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.

Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Windows Pro Safety Release activation code (helps removal):
0W000-000B0-00T00-E0020
NOTE: "Activating" Windows Pro Safety Release is not enough. You need to remove related trojans \ rootkits using reliable malware removal solution.
It is important to fix Windows registry after Windows Pro Safety Release malware removal using safe registry cleaner software.

Windows Pro Safety Release manual removal guide:

Delete infected files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[random 3 characters].exe
%AppData%\Protector-[random 4 characters].exe
%AppData%\W34r34mt5h21ef.dat
%AppData%\result.db
%CommonStartMenu%\Programs\Windows Pro Safety Release.lnk
%Desktop%\Windows Pro Safety Release.lnk
Delete Windows Pro Safety Release registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorAdmin” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorUser” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “EnableLUA” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-4-27_2″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “tovvhgxtud”
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\[random].exe

No comments: