How to remove
Uninstall Window Security Master
from Windows

This program detected Trojan.Ransom in my system. To do that, the program offers to buy the full version. It also occasionally shows identify theft alerts. Is my system really infected or is this program a scam?

Windows Security Master operates as a rogue anti-virus software[ref en-1]. It functions similarly to PC optimizers which frighten users with dozens of counterfeited alerts about system issues or infected system.

However, this program is much more troublesome. It is classified to Rogue.FakeVines group of PUPs.[ref en-2] It has an identical design and operation method as Windows Antivirus Helper. The apps were most active in 2014, though Windows 7 users might still spot them even now. Both programs display additional notifications[ref en-3] alarming users about the infected operating system. Here is an example:

Error
Potential malware detected. It is recommended to activate the protection and perform a thorough system scan to remove the malware.

It also interferes with browser performance or even security tools. In some cases, it even prevented users from launching them. Furthermore, the program also leaves its registry files on the device. 

Their purpose is to trouble Windows Security Master removal. On the other hand, there is no need to worry as below instructions will assist in eliminating the software completely. You might also want to uninstall the program which you accidentally downloaded Windows Security Master with.

Bear in mind that both rogue apps are distributed as additional add-ons to freeware. Thus, once you install any program, choose “Custom” rather than “Recommended” settings. Unmark optional add-ons before installing the primary software. Now let us review the steps which will help you remove Windows Security Master.

Step 1. Boot the computer in Safe Mode

Since the program mostly targets Windows 7 users, restart the system the following way:

1. Reboot the PC. Before Windows logo appears, tap F2 or F8 to launch setup settings.
2. Once they are loaded, navigate to Safe Mode entry with arrow keys and press Enter.

Step 2. Launch Registry Editor

1. When the device launches in the mode, press Windows+R button, enter regedit and hit Enter.
2. Registry Editor opens. Go to My Computer/HKEY_CURRENTY_USER/Software/Microsoft/Windows/CurrentVersion/Run/.
3. Right-click on the ZSFT file and select Delete. Click Yes.
4.  Registry Editor.

Step 3. Delete remaining files

1. Navigate to Local Disk/User/admin/AppData/Roaming.
2. Later on, mark data.sec and svc-wmfw files with the mousepad, right-click on the selection and choose Delete. Restart the system into Normal mode.

Scan the system once again to make sure no files remain. You can use [d1] for the following.