cancel
Showing results for 
Search instead for 
Did you mean: 

Windows Pro Safety Release

Jump to solution

I cannot believe that McAfee Total Protection was duped by the is Malware Anti-virus.  I have searched the forum and zero results.I have search McAfee's virus db and zero results.

Should I be looking for another name?  According to google results it requires a registry cleanup, but the malware neutered McAfee and hijacke regedt and Task Manager.

Thoughts anyone?

1 Solution

Accepted Solutions
Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 2 of 7

Re: Windows Pro Safety Release

Jump to solution

Moved this to Top Threats in Security Awareness.   None of the major antivirus applications detect these fake anti-malware entities.

There is an excellent removal guide here:  http://www.bleepingcomputer.com/virus-removal/remove-windows-pro-safety-release

There are some suggestions here also:  https://community.mcafee.com/docs/DOC-2168

6 Replies
Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 2 of 7

Re: Windows Pro Safety Release

Jump to solution

Moved this to Top Threats in Security Awareness.   None of the major antivirus applications detect these fake anti-malware entities.

There is an excellent removal guide here:  http://www.bleepingcomputer.com/virus-removal/remove-windows-pro-safety-release

There are some suggestions here also:  https://community.mcafee.com/docs/DOC-2168

Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 3 of 7

Re: Windows Pro Safety Release

Jump to solution

The first thing to try is to use System Restore to go back to before it happened.  You can initiate that in Safe Mode if necessary.

Highlighted
Reliable Contributor Hayton
Reliable Contributor
Report Inappropriate Content
Message 4 of 7

Re: Windows Pro Safety Release

Jump to solution

http://www.bleepingcomputer.com/virus-removal/remove-windows-pro-safety-release

The poster may need to update one or more out-of-date programs - Flash, Adobe Reader, Java are the usual culprits unless Windows updates haven't been installed.

This particular variant is spread via two methods. The first method is the use of hacked web sites that exploit visitor's vulnerable programs in order to install the rogue without their permission. The second method uses web sites that display fake online anti-malware scanners that pretend to scan your computer, state that it is infected, and then prompt you to download and install Windows Pro Safety Release in order to clean it.

Windows Pro Safety Release will hijack the Windows Task Manager and Registry editor so that when you launch them, it will instead open the rogue's Advanced Process Control screen, which acts like a task manager. This allows the rogue to take full control of your computer until you pay the "ransom".

Follow the instructions in the page linked to at the start of the post.

Re: Windows Pro Safety Release

Jump to solution

Thank you for the quick feedback.  I was leaning toward http://www.bleepingcomputer.com/virus-removal/remove-windows-pro-safety-release, but wanted to hear from the community just in case I would be heaping on more malware and digging a deeper hole.  My daughter is so thankful.She was decieved by the shield thinking it was safe when she pushed submit on the fake antivirus. Too bad McAfee is not up to speed. Makes me wonder what I am $$$ for.  Decisions at renewal time.

Again many thanks to the community!!!

Re: Windows Pro Safety Release

Jump to solution

BTW, I did try running McAfee Virtual Technician beforehand. It recongnized the Agent services were not running and 1 broken registry.  It fixed the registry, but after several attempts it still could not restart the Agent services.  For completeness, I ran it again after using Malwarebytes' Anti Malware.  I had to use MVT to force the update to latest DAT.

Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 7 of 7

Re: Windows Pro Safety Release

Jump to solution

Nothing will function properly until this is cleaned out.    As I stated earlier, no antivirus will stop these things because they rely on someone clicking something, even the 'Close' or 'X" to clear the screen, in order to be activated..

BleepingComputer is an extremely reputable source of help in these and many other matters.

Don't ever click anything unless you recognize it and trust it.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community