Severity scale:  
  (66/100)

Windows Custom Safety. How to remove? (Uninstall guide)

removal by Lucia Danes - -   Also known as Windows Custom Safety | Type: Rogue Antispyware
12

Windows Custom Safety is a rogue anti-spyware application from the same family as Windows Privacy Module malware. This fake security program is distributed mainly through the use of Trojan downloaders that come from fake online virus scanners and infected websites. Scammers also distribute this rogue application via spam and social networks. One way or another, it's either a drive-by download or fake virus scanner that loads the rogue program on targeted computers. That's why should ignore and delete messages that contain links from people you don't on popular social networks and other sites, for example forums. Once installed, Trojan virus downloads Windows Custom Safety onto your computer and starts a fake system scan. The scan results are of course false, so you may safely ignore them. By the way, this fake program will detect harmless and fake files that were created by Trojan virus in order to validate the scan results. The main goal of this virus is to scare you into purchasing the rogue program. Do not pay for it. Instead, use the removal guide below to removeWindows Custom Safety from your computer upon detection.

What does Windows Custom Safety do to the system?

While running, Windows Custom Safety will display many fake security alerts and pop-ups. Some of those fake alerts will state:

Warning! Identity theft attempt Detected
Hidden connection IP: xxxxxxxxx
Target: Your passwords for sites

Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

Also, when running, Windows Custom Safety will block legitimate antivirus and antispyware software and hijack Internet Explorer as well as other web browsers installed on your computer in order to protect itself from being removed.

How to remove Windows Custom Safety?

When you can't download malware removal software, you obviously cannot remove anything. That makes sense, thankfully you can disable the rogue program rather easily and download malware removal software. We will show you how. The rogue program will modify Windows Hosts file and redirect you to various misleading websites that promote rogue programs or advertise malicious services. As you can see,Windows Custom Safety is a total scam. Don't purchase it! Please read the removal guide below to find out how to remove Windows Custom Safety from your using an automatic removal tool given below. If you have already purchased this bogus software, please contact your credit card company and dispute the charges.

The latest parasite names used by FakeVimes:
[newest]

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Custom Safety you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Custom Safety. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Windows Custom Safety snapshot
Windows Custom Safety

Windows Custom Safety manual removal:

Kill processes:
Inspector-[rnd].exe

Protector-[rnd].exe

Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "WarnOnHTTPSToHTTPRedirect" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegedit" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegistryTools" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Inspector"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "net" = 2012-2-25_1

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avp32.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsashLogV.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsbeagle.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsjedi.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsa.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsntvdm.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsrav7.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsspoler.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsvir-help.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionswupdt.exe

Delete files:
Inspector-[rnd].exe

Protector-[rnd].exe

%Temp%[random].dll

About the author

Lucia Danes
Lucia Danes - Virus researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Lucia Danes
About the company Esolutions