Windows Custom Safety is just a useless and fake software acting like a real anti-virus program. It belongs to infamous rogue virus family of scamwares. If your computer is infected with “Windows Custom Safety virus” then its important for you to first understand the behavior and mission of this malware. Let me explain. Windows Custom Safety is a creation of hackers who want to steal your money by selling some fake security products to you like anti-spyware programs. For this purpose, they use Trojans on some malicious websites, when you reach to a bad website and if your computer is security vulnerable, the virus Windows Custom Safety will be installed on your PC without your permission and it will be done very secretly so you wont notice the download process. Once your computer has got Windows CustomSafety virus, it will start displaying unwanted popups on your screen stating that your computer is in danger of spyware and virus threats. You,ll be told that Windows Custom Safety is a powerful anti-spyware program designed by Microsoft and it has found some viruses on your computer that you must have to remove to make your PC clean. Soon you,ll be offered to use the services of Windows Custom Safety by purchasing its full version so it could remove the detected malwares from your machine. Please do not trust these fake campaigns, it is the goal of Windows Custom Safety to trick you into buying it.
Please remember! Windows Custom Safety is not a real and effective program to help you but it is a nasty bug that can make you rip your hair. It can install further infections on your computer from remote servers. It will disable your windows TaskManager and Regedit registry editor tools. It will display frequently scary popups on your screen. It will try to steal your money and private data. It is recommended to delete Windows Custom Safety and its components soon.
How to uninstall Windows Custom Safety virus manually:
To remove this virus manually, complete the following set of tasks. Do not forget to create a backup before getting started to the manual removal guide.
To prform manual removal steps, you may need to learn,
How to stop a process
How to delete registry entries
Stop Windows Custom Safety processes:
Protector.exe
Disable Windows Custom Safety DLL files:
npswf32.dll
Remove Windows Custom Safety Registry Entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
Delete Windows Custom Safety files:
%AppData%\Protector.exe
Auto Removal
To remove this virus Automatically, We suggest following tools:
Malware Bytes Anti-Malware (Download)
HitMan Pro Anti-Malware (Download)
