How to uninstall Windows Safety Guarantee

Written by Administrator | Monday, 21 February 2011 12:39

Windows Safety Guarantee is a rogue Antispyware, a scareware, it's a malware that pretends to be an Antivirus. Windows Safety Guarantee a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm telling that there are some malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is this Windows Safety Guarantee. Windows Safety Guarantee invites you to purchase a license for this bogus program to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Windows Safety Guarantee as soon as possible from your system with this removal tool for Windows Safety Guarantee.

Windows Safety Guarantee

To remove Windows Safety Guarantee (Uninstall Windows Safety Guarantee)

Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
Choose Start computer in SAFE MODE with network support
Open Internet Explorer
Go to Tools => Internet Options => Connections Tab => LAN Settings
Uncheck "Use a proxy server"
Recheck "Automatically detect settings"
Download this free removal tool for Windows Safety Guarantee
Extract it
Launch
Click on the delete button

Windows Safety Guarantee will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

[Random].exe

Files :

%AppData%\[random]

Registry

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe
- Debugger = svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe
- Debugger = svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe
- Debugger = svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe
- Debugger = svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
- Debugger = svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
- Debugger = svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore
- DisableSR = 1

Remove Windows Safety Guarantee manually :

Restart your computer in safe mode :
- Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
- Choose Start computer in SAFE MODE
Open the infected account
Open explorer, paste into the address bar %AppData% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Temp on my computer
Remove all .exe files and all random folders under this path
Click on the start menu button then click on run
Type msconfig and press enter
Go to the Startup tab
Uncheck all values which point to an .exe file under %AppData%
Restart your computer in normal mode

This will solve the problem but you can run the removal tool to remove the other registry keys and values.

To find where your %AppData% path is :

Click on the start menu
Click on run
Enter %AppData% and press OK

Comments

0 #2 2011-02-25 13:35

Thanks a lot!
Amazing!

Quote

+1 #1 2011-02-25 08:19

Excellent removal tool. Thanks for saving my computer and projects on it.
I am in High School and I had some video on my machine that I needed and this save my life for coming Monday. Very much appreciate your tool.

Quote

Refresh comments list
RSS feed for comments to this post.