> VilmaTech Blog > Remove Windows Safety Master, Uninstall Fake Anti-spyware Virus Simply

Remove Windows Safety Master, Uninstall Fake Anti-spyware Virus Simply

Windows Safety Master is another emblematic fraud tool utilized by fraudsters to captivate inculpable victims for money extortion through typically displaying bogus scan results upon its installation. According to the attributes of Windows Safety Master, it has been classified as a rogue anti-spyware program or rogueware that has the capability to make hazards on affected operating system with the aid of advanced hack techniques. Basically, this type of rogueware embezzles the fundamental structure from standard system security utility, and pretends to be a practical anti-spyware program which offers Windows protection for computer users. As long as being installed, Windows Safety Master will operate an auto-scan and indicate that the computer has been assaulted by numinous computer threats such as Trojans, worms, or other system errors.

rogue virus

In order to get rid of the detected risks, Windows Safety Master will encourage victims to register and purchase its fake full licensed version. However, the Windows Safety Master is only counterfeited by scammers as a fake anti-spyware application, which has no association with the legitimate system security software. Most commonly Windows Safety Master fake application is being spread using exploit kits which are able to permeate a victim’s computer via taking advantage of found system security vulnerabilities. The threat may be also distributed by compromised websites or other peer-to-peer file sharing web pages. When users visit these infected websites, the Windows Safety Master virus may be dropped onto targeted machine surreptitiously. Another common method used to propagate this type of rogueware is SPAM email which contains infected attachments or links.

Additionally, computer users may get infected with Windows Safety Master when they download pirated or illegally acquired software that has been involved with the activation code of the virus. Similar as other rogueware like Windows Prime Accelerator, Windows Safety Master virus generally can be loaded up automatically every time Windows boots up. This is because Windows Safety Master virus is capable of modifying the work of default system configuration – Windows boot sector, by constantly inserting its destructive codes and registry files onto affected operating system. This type of threat may also slow down the performance of computer via taking up high system resources. Apart from the basic symptoms, Windows Safety Master fake application may also utilize the excavated system loopholes to install and execute other invasive PC threats without any permission or knowledge. Without any doubts, Windows Safety Master should be removed from computer timely once being informed of its presence to refrain from further damage.

Additional Tips: The following manual removal of Windows Safety Master requires computer expertise. If you are not familiar with the operation and afraid of making mistake, you may start a live chat with VilmaTech 24/7 online agents for tech support.

live chat

How to Remove Windows Safety Master with Manual Skills

1. Safe Mode with Networking

“Safe Mode with Networking” is a common-used mode to repair system problems. To deal with Windows Safety Master virus, you can boot up affected computer into “Safe Mode with Networking” mode first. This will help you remove Windows Safety Master easily.

If you are Windows 7, XP & Vista users:

a.    Restart your infected computer.
b.    When your computer restarts but before Windows launches, keep pressing F8 key.

c.    In the Advanced Boot Options screen, use the arrow keys to highlight the “Safe Mode with Networking” option, and then press ENTER.

If you are Windows 8 users:

a.    Start up affected computer normally.
b.    When you see the desktop, press Ctrl+ Alt+ Del key together to show Switch User interface.

win8 task manager
c.    Hold down the Shift” key while clicking on “Shut down” button.

d.    When you see three options: Sleep, Shut down and Restart. Choose Restart option to go ahead.
e.    Now you need to select “Choose an Option”> “Troubleshoot” > “Advanced Options” > “Windows Startup settings”.

win8 safe mode3
f.    Then choose Restart again and wait for a while. In the pop-up Advanced Boot Options window, press F5/5 key to choose Safe Mode with Networking option and OK.

win8 safe mode4

Tips: The instruction above is for advanced computer users, since  Windows Safety Master is very tricky; it’s hard to handle it without relative expert skills. Cannot remove  Windows Safety Master by yourself? VilmaTech 24/7 Online Agents would help you out soon!

live chat

2. Show hidden files of Windows Safety Master

Tricky as Windows Safety Master is, it may hide its malicious codes and files onto system with the help of its advanced techniques. Hence, to remove Windows Safety Master completely, you need to show the hidden files of Windows Safety Master to continue.

a.    To do so, you need to open Folder Options by clicking Start button> Control Panel> Appearance and Personalization, and then clicking Folder Options.

file folders 2
b.    In the Folder option window, select View tab.
c.    Find Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.


3. Check and remove Windows Safety Master associated files:

%system%\[random characters].dll
%Documents and Settings%\[User name]\Desktop\[random name].exe
C:\Users\Stuart\AppData\Local\Temp\[random names].exe

4. Remove all the registry files of Windows Safety Master.

a. Open Registry Editor by navigating to Start Menu, type in Regedit, and then click OK.

b. In the Registry Editor window, search and remove the following registry entries related to Windows Safety Master.

registry enditor2

HKEY_CLASSES_ROOT\CLSID\[random numbers]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\”Shell” = “[SET OF RANDOM CHARACTERS].exe”
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Shared Tools \ MSConfig \startupfolder\[random names]
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Shared Tools \ MSConfig \ startupreg\[random names]


The Windows Safety Master is a fake anti-spyware application designed by cyber criminals to make hazards on affected operating system and gain from victims. It clones the basic structure from standard anti-spyware program and pretends to be a helpful security tool for computer users. No matter how authentic the Windows Safety Master looks like, it has nothing to do with the legitimate services. It is certain that computer users need to remove Windows Safety Master Rogue virus as long as being informed of its existence. However, with the help of advanced hack techniques, Windows Safety Master virus has the capability to bypass the detection and removal from security tools or virus remover. If this is the case, you may consider the helpful manual removal to get rid of Windows Safety Master virus completely. Anyhow, manual removal is risky and tough process requiring expertise. If you haven’t sufficient expertise on doing that, it’s recommended to ask help from a VilmaTech 24/7 Online Computer Expert to manually and completely remove Windows Safety Master for you.

live chat

Comments are closed.

Latest Posts