Windows Safety Protection Removal Guide

Windows Safety Protection is a program that is used to cheat the money of people by showing error message in the computer such as the computer has been infected by malwares. Windows Safety Protection adds a registry entries to make itself to start automatically when Windows boot. After that, Windows Safety Protection will do fake scan on the computer and then issue fake warning by showing pop ups to tell the the user that the computer has been infected by malwares which can only be removed by the full version of Windows Safety Protection. Thus, the user is urged to purchase it. Do not believe any report given by Windows Safety Protection even the warning look so real. In fact, Windows Safety Protection cannot detect and remove any error or malware on computer.

Windows Safety Protection can be uninstalled by by stopping all processes with random name and also kill its files. Then, all registry entries added and modified by Windows Safety Protection must be cleared by using Windows Registry Editor.

Windows Safety Protection should be removed immediately!

Windows Safety Protection Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = '%UserProfile%\Application Data\.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'

Remove Folders and Files
%UserProfile%\Application Data\.exe

%UserProfile% is current user's profile folder. By default, this is C:\Documents and Settings\ for Windows 2000/XP, C:\Users\ for Windows Vista/7, and c:\winnt\profiles\ for Windows NT.