Windows Safety Toolkit. How to remove? (Uninstall guide)

removal by Julie Splinters - -   Also known as WindowsSafetyToolkit | Type: Rogue Antispyware
12

Windows Safety Toolkit is a rogue anti-spyware program that was designed to rip computer users off by displaying fake security alerts and reporting false scan results. This fake security product pretends to be a genuine malware removal tool that is essential in protecting your system from security threts and notorious infections but the truth is that it actual doesn't have abilities to perform any PC security related tasks at all. Windows Safety Toolkit was designed by computer criminals who have only one goal – to scare you into thinking that your computer is infected and to trick you into purhchasing useless anti-spyware product.

Basically, when this rogue anti-spyware program is installed it is run right after your Windows fully loads. Later on the same is repeated each time the system is restarted. Windows Safety Toolkit may look just like any other legitimate antispyware program because it's pretty well designed. It then runs a fake system scan and displays a bunch of files supposedly detected on your computer and then states they pose risk to your computer and can even steal your credit card details and passwords.

Windows Safety Toolkit recommends purchasing a full version of its program in order to remove threats that have been detected during the fake system scan. However, everything will end by swindling your money away as such version of a program doesn’t even exist. It will simply change the GUI to make it look like you are now using fully functional version that can protect your computer from malware and viruses. Besides, while Windows Safety Toolkit is running on the system it causes a bunch of pop up ads and security notifications that warn about system threats like Trojans, spyware and malware detected on your system and other security problems. All of them are also meant to make computer user pay for it.

Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.

You are strongly advised to remove Windows Safety Toolkit as soon as possible. That’s is one and only way to get rid of all unwanted actions that are cause by this rogue anti-spyware program. Even though you may remove it manually we strongly recommend you to use malware removal tool give below because the rogue anti-spyware can download and install more malware on your computer.

The latest parasite names used by FakeVimes:
[newest]

do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Safety Toolkit you agree to our privacy policy and agreement of use.
Reimage is recommended to uninstall Windows Safety Toolkit. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Windows Safety Toolkit (2012-08-02)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Windows Safety Toolkit (2012-08-02)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Windows Safety Toolkit (2012-08-02)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Windows Safety Toolkit (2012-08-02)

Windows Safety Toolkit manual removal:

Kill processes:
%appdata%Inspector-[rnd].exe

%AppData%Protector-[rnd].exe

Delete registry values:
HKEY_CURRENT_USER\SoftwareMicrosoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0

HKEY_CURRENT_USER\SoftwareMicrosoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0

HKEY_CURRENT_USER\SoftwareMicrosoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0

HKEY_CURRENT_USER\SoftwareMicrosoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0

HKEY_CURRENT_USER\SoftwareMicrosoft\Windows\CurrentVersion\Run "Inspector"

HKEY_CURRENT_USER\SoftwareMicrosoft\Windows\CurrentVersion\Settings "net" = "2012-3-11_2?

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "origkboryd"

HKEY_LOCAL_MACHINE\SOFTWAREMicrosoft\InternetExplorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312

HKEY_LOCAL_MACHINE\SOFTWAREMicrosoft\Windows NT\CurrentVersion\Image File Execution Options\atcon.exe

HKEY_LOCAL_MACHINE\SOFTWAREMicrosoft\Windows NT\CurrentVersion\Image File Execution Options\bipcp.exe

HKEY_LOCAL_MACHINE\SOFTWAREMicrosoft\Windows NT\CurrentVersion\Image File Execution Options\ecengine.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\infwin.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PavFnSvr.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sahagent.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\titaninxp.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wsbgate.exe

Unregister DLLs:
%AppData%NPSWF32.dll

Delete files:
%appdata%Inspector-[rnd].exe

%AppData%Protector-[rnd].exe

%AppData%NPSWF32.dll

About the author

Julie Splinters
Julie Splinters - Malware removal specialist

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author