Several Methods to Remove Windows Software Saver

TAGS: remove Windows Software Saver

Recently Windows Software Saver kept popping up security alerts and scanning my PC without permission. It claimed that my computer was infected by various infections and should be fixed immediately. I have tried some other antivirus programs but to no avail. It interferes with my online working so I want to get rid of it as soon as possible. I don’t even know where it came from. I really need your help!! Any help will be appreciated!

Learn more about Windows Software Saver

Windows Software Saver is a fake antivirus program that provides no PC protections and only aims at scamming. It is similar to other rogue programs which were released before. This program is usually bundled with freeware on the Internet and it can enter the PC without permission. Once installed on your PC, the rogue program makes modifications in the system settings and it is able to launch every time Windows starts.

Screenshot of the rogue program:

 

The malware imitates other legitimate antivirus software and does an auto virus scan. It reports that hundreds of cyber infections are detected on your computer and you are asked to purchase the full version of its product to remove all the threats and get ultimate protections. You should not be taken in by this scam. Your computer won’t be protected after you pay for the antivirus program. Meanwhile, your financial information may be revealed and stolen by cyber criminals.

Windows Software Saver may also stop many installed programs, especially antivirus programs, from running and block your access to security center websites. In this way, the malware can prevent itself from being removed. In addition, it display constant phony security alerts and scan results when you are using the infected computer.

The pop-up warnings and virus scan reports from this fake security program should be ignored because they don’t reflect what happen on your computer. Please keep in mind that under no circumstances should you buy its licensed version. If you have paid for it, you can try contacting your credit card company immediately and stop the payment. Don’t be a victim of the financial scams set by cyber criminals.

You are suggested to remove Windows Software Saver as soon as you find it on the computer. Follow the step-by-step manual removal guide below, you will be able to get rid of the malware completely. If you have difficulty in deleting the malware, use a powerful malware removal tool to automatically clear it. It can save your time and eradicate all the leftovers of the malware fully.

Windows Software Saver is dangerous for the following reasons:

1. It is a stubborn rogue antivirus program that tampers with the system settings.

2. It delivers a lot of counterfeit pop-up alerts to trick you into buying it.

3. It can disable your programs and interrupt internet connection.

4. It slows down your computer performance.

5. It may steal your confidential information, such as credit card details, when you pay online.

6. It may provide no uninstall feature so you cannot remove it smoothly.

How to manually remove Windows Software Saver?

If you are a computer nerd, you can follow the manual removal instructions to deal with the rogue program effectively. The manual removal requires you to have computer skills. You need to manually stop the malicious processes, delete the files and registry keys of the rogueware. Before the manual removal, please make a backup of your important data in case any wrong action is taken. The steps below show how to start it.

Step1. Uninstall Windows Software Saver from Control Panel.

For Windows 7/Vista, click Start button, go to Control Panel, click Programs and click Programs.

In the list of Currently installed programs, select the rogue antivirus program and click Uninstall button.

For Windows 8, point to the upper-right corner of the screen, move the mouse pointer down, and then click Search.

Type control panel in the search box, and then tap or click Control Panel.

 

Under View by:, select Large Icons, and then tap or click Programs and features.

Click the rogue program, and then tap or click Uninstall.

 

Follow the instructions prompted to complete the removal.

Step2. Show the hidden files and delete the files created by the rogue program.

The files created by the malware may be protected and hidden, so you can alter the files and folders settings first. Click the Start button, click Control Panel, click Appearance and Personalization and then click Folder Options.

Go to the View tab. Under Advanced settings, check Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.

Search for the following files and erase all of them.

%AppData%\NPSWF32.dll

%AppData%\Protector-<random 3 chars>.exe

%AppData%\result.db

%CommonStartMenu%\Programs\[rogue program name].lnk

%Desktop%\[rogue program name].lnk

Note:If you use Windows Vista, Windows 7, or Windows 8, %AppData% refers to C:\Users\<Current User>\AppData\Roaming, %CommonStartMenu% refers to C:\ProgramData\Microsoft\Windows\Start Menu\ and %Desktop% refers to C:\Users\<Current User>\Desktop\.

Step3. Delete the registry entries generated by the malware.

To modify the registry entries, you need to open Registry Editor. Click Start, go to Run, type regedit in the box and click OK.

When the Windows Registry Editor opens, find out the following registry entries and eliminate them.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorAdmin” = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorUser” = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “EnableLUA” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-3-24_2″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “kebfwmwlto”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\xpdeluxe.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\xpf202en.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapro.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zatutor.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zonalm2601.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zonealarm.exe

… and many more Image File Execution Options entries.

How to automatically and quickly get rid of Windows Software Saver?

In addition to the manual removal above, there is another easier method to uninstall Windows Software Saver – using Mighty Uninstaller to rapidly and fully wipe out the rogue program. It is a removal utility which is designed to remove any unwanted programs or files. All of the files and registry entries of the unwanted program will be deleted within seconds by using this professional removal tool.

Therefore, follow the simple steps below and you will be able to delete the fake antivirus program rapidly and thoroughly.

Download and install Mighty Uninstaller.

After installing the utility, run it and click Software Uninstall, select the fake security program and click Delete.

Then exit the tool and restart your PC. The malware will be gone forever.