What is Windows Safety Series?
Windows Safety Series is a type of scareware infection. It installs and appears to function as a real antivirus application. This is, however, only to trick the user into giving the infection credit card information.
How Did I get infected with Windows Safety Series?
Most infections of this type install through what are known as zero-day exploits. These are basically holes in the security of things like Flash Player, java, or your web-browser itself. You should always be wary of Facebook requests from people you don’t know, or suspicious looking emails. If you ever question the legitimacy of an email or facebook request, its generally advisable to be safe rather than sorry.
What is Windows Safety Series Doing to My Computer Right Now?
Every file reported as infected by this infection is a false-positive. The scary-sounding warning messages shown are also fake. The infection will not destroy files or steal data. In most cases they are trying to funnel you to their site to pay for the fake service.
Here are some examples of warning boxes you may get when it is installed.
Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
Error
Trojan activity detected. System data security is at risk.
It is recommended to activate protection and run a full system scan.
Warning
Firewall has blocked a program from accessing the Internet
C:\program files\internet explorer\iexplore.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Windows Safety Series
» Download Windows Safety Series Removal Software
You should remove Windows Safety Series as soon as possible. If you have one infection in many cases you will have minor threats or browser toolbars that should be removed. This is why it’s so important to run a full virus scan even if you follow the manual removal guide below. Be sure to run a full virus scan once you have manually removed Windows Safety Series.
Windows Safety Series Removal Video
Windows Safety Series Manual Removal Procedures
The first step you must take in order to remove Windows Safety Series is to stop the following process. Watch the video for guidance.
- Protector-Random 3 to 4 characters .exe Your file trace will be named different Example: Protector-1fr3.exe.
To Stop this process you can
A. Browse to the file location shown below and re-name the file first and then restart your computer. Then browse to that file location again and delete the file.
B. Boot into Safe Mode and delete the file
C: Log-into another users account and see if you can delete the file.
D: Start the Task Manager the very second you login and terminate the process that way.
The next step in Windows Safety Series removal is to delete the following file:
Protector-Random 3 to 4 characters example (acf).exe
Once you have deleted the above executable, Windows Safety Series will no longer be running. At this time you need to run a full virus scan. RUN THE SCAN!. We recommendSpyHunter . You need to ensure no other viruses are on your computer. So many people skip this very simple step. Take an extra few minutes and ensure you have all the viruses removed.
If you find this threat too hard to remove yourself and need an expert we recommendhttp://www.pcninja.com . They charge far less than others and are great at what they do.
Windows Safety Series Directories:
-
%AppData%\NPSWF32.dll
-
%AppData%\Protector-Random 3 to 4 characters example (acf).exe
-
%AppData%\Protector-Random 3 to 4 characters example (acf).exe
- AppData%\result.db
File Location Notes:
%AppData% refers to the current users Application Data folder. By default, this is C:\Documents and Settings\<Current User>\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\<Current
Speak Your Mind