How to Remove SafeNavWeb Spyware

Are you wondering how to remove SafeNavWeb spyware from your computer? Let me show you some very easy removal instructions to get rid of this nasty browser hijacker. If you aren’t familiar with SafeNavWeb, it is a type of spyware that will trick you into thinking you are infected with spyware. You may receive messages like:

ATTENTION! You have not completed the virus scan!
Your PC is still infected with spyware!
Please return to XPantivirus.com and download XP antivirus scanner.

You are actually not infected with anything. Your browser is hijacked by SafeNavWeb that is sending you fake alerts that your computer is infected. Of course, most people will go download their scanner, but in reality they will just be downloading more spyware. They are tricking you into purchasing their program.

SafeNavWeb Removal Instructions

Easy Method: Removing SafeNavWeb from your computer can be difficult. You can automatically clean SafeNavWeb by using an automatic spyware scanner and remover, such as XoftSpySE. If you’d like to get a free scan with XoftSpySE, just click here. This will remove SafeNavWeb from your computer.

Manual Method: When you decide to manually remove SafeNavWeb from your computer, you are will be deleting files, editing your registry, and much more. You are taking the risk of possibly destroying your PC. It is highly recommend you use one of our top antispyware programs to easily remove SafeNavWeb spyware. It is also recommended you set up a Windows restore point in case anything goes wrong.

To begin, you are going to need some tools. Here is what you will need. Download and extract these onto your desktop:

1. HiJackThis - Download link
2. Avenger - Download link
3. SmitfraudFix - Download link

Now you are going to need to boot into safe mode. To do this, you are going to have to restart your computer. After hearing your computer beep once, but before the Windows icon comes up, tap F8 until you see a new menu. Select the first option, to run Windows in Safe mode.

Once you are logged on your profile, open up HiJackThis and select “Do a system scan only”. Put a checkmark next to the following:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: MSVPS System - {480598DD-AE28-48B7-82F7-6ADDA1AA6B66} - C:\WINDOWS\ntspkfxt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: The htunistock - {C58A4487-4C2E-45E4-9E3A-52B3A23CC396} - C:\WINDOWS\htunistock.dll
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O21 - SSODL: hostctrl - {20D7F2C0-86AB-4F63-88E4-E3F4887E0CC1} - C:\WINDOWS\hostctrl.dll
O21 - SSODL: hstsys - {44195BC8-06C2-4D25-81E9-1607B1313715} - C:\WINDOWS\hstsys.dll

Once you have checkmarked those, select “Fix Checked”.

Now go ahead and open up Avenger. Check the “Input Script Manually” and click the magnifying glass icon. Now in the box that opens, paste this:

Files to delete:
C:\WINDOWS\ntspkfxt.dll
C:\WINDOWS\htunistock.dll
C:\WINDOWS\hostctrl.dll
C:\WINDOWS\hstsys.dll

Now click “Done”. Click the traffic light to begin the program. Now press OK at the prompt that asks to reboot your PC. Be sure you boot it into safe mode again.

Once you are back on your profile, open up the Smitfraud folder on your desktop and double-click smitfraudfix.cmd. Once open, press the number 2 on your keyboard and press Enter to choose the option Clean.

You will be asked “Registry cleaning - Do you want to clean the registry?”, be sure to choose Yes by pressing Y on your keyboard and press Enter in order to remove the Desktop background and to clean registry keys.

You should notice that wininet.dll is being checked by Avenger. If you are asked to replace the infected file, press Y on your keyboard.

Once finished, the tool may ask the computer to be restarted. If you receive this message allow your computer to restart. If not, go ahead and reboot your computer into Normal mode.

Congratulations, you now have a SafeNavWeb spyware-free computer!

 

Leave a Reply