How to remove Windows Security Renewal

Home » Rogue Anti-Spyware » Windows Security Renewal Repair and protect your computer easily. Download Windows Security Renewal removal tool

Windows Security Renewal description

Windows Security Renewal is nothing but a hoax which spreads via trojan horse. Malware gains to force user into purchasing its “licensed” version. This is a fraud and you need to ignore it.

Once installed Windows Security Renewal starts to scan your system and displays fake security alerts that state about your PC infections:

Error
Trojan activity detected. System data security is at risk.
It is recommended to activate protection and run a full system scan.

Error
Attempt to modify registry key entries detected. Registry entry analysis is recommended.

Error
Attempt to run a potentially dangerous script detected.
Full system scan is highly recommended.

This is a lie. Do not fall for this scam. Do not buy anything it offers but choose reputable spyware scanner and get rid of Windows Security Renewal as soon as possible.

How to get rid of Windows Security Renewal

This infection can be removed using Spyware Doctor.

Download does not start? Try a mirror download here
Spyware Doctor is widely valued as one of the best AntiSpyware programs available to protect you from Windows Security Renewal and the latest internet security threats. If your computer is infected with Windows Security Renewal we strongly recommend automatic spyware scanner.

How to manually remove Windows Security Renewal

To get rid of spyware such as Windows Security Renewal you need to remove processes, search and delete registry keys, DLL and other Windows Security Renewal related files from your computer.

Take Note: The manual process of removing spyware from your computer is difficult and puts you at risk of damaging your computer. We advise using our automatic Windows Security Renewal remover.

1. Uninstall Windows Security Renewal from Control Panel
   Start > Settings > Control Panel > Add/Remove Programs. Double click to uninstall.
2. End these Windows Security Renewal processes:
   Protector-.exe
   To stop processes press Ctrl + Alt + Del or click Start > Run > type "taskmgr". Select malicious process in the list and click "End Process" button.
3. Unregister Windows Security Renewal DLL files:
   NPSWF32.dll
   To unregister DLL click Start > Run > type "regsvr32 /u PATH_TO_FILE/FILE.dll"
4. Delete Windows Security Renewal registry entries: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-7-19_4"
   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "fcvenajyfr"
   HKEY_CURRENT_USER\Software\ASProtect
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ants.exe
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\c.exe
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fih32.exe
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kerio-pf-213-en-win.exe
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\navlu32.exe
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\personalguard
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sh.exe
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vir-help.exe
   To open registry editor click Start > Run > type "regedit".
   Warning! Manual registry entries editing may cause damage to your system.
   Download Uniblue RegistryBooster 2010 to scan for registry errors.
5. Search and delete these Windows Security Renewal related files:
   %AppData%\NPSWF32.dll
   %AppData%\Protector-.exe
   %AppData%\Protector-.exe
   %AppData%\result.db
   %AppData%\1st$0l3th1s.cnf