1 of 5
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:
WindowsAnticrashesUtility

Windows Anticrashes Utility

If you have opened this page, you must be having problems with Windows Anticrashes Utility. Or you simply must be wondering why there this “antivirus” in your computer when you have just recently got rid of something similar. It might have been called Windows Troubles Solver, Windows Necessary Firewall or even Windows Precautions Center – these rogue antispyware applications are practically all the same, and they come from the Fake Microsoft Security Essentials scam. Windows Anticrashes Utility is just another installment in this series of identical threats.

Usually, before the Windows Anticrashes Utility infection the user is already infected by various Trojans, which subsequently connect to a remote server over the internet and download this rogue. The Trojans themselves can be caught in various websites that the user frequent every single day. Even a website which gives the users opportunity to upload their files online might have some flashing advertisements in the corners, which once clicked link the user to another, this time infected site, automatically downloading the Trojan.

Windows Anticrashes Utility also uses “Trojans” to scare the user into downloading the rogue, because at the very beginning it sends fake security messages stating that the computer has been infected with unknown Trojans, and the user must download Windows Anticrashes Utility to check his computer for any other possible infections. If the program is downloaded, it reboots the computer and then starts up automatically once the computer loads again.

With automatic start-up, Windows Anticrashes Utility performs a fake system scan, “determining” that the system components (except for the Media) are not safe anymore, and the user must purchase the full version of the program if he wants to clean the computer. This purchase is the main goal of Windows Anticrashes Utility. Because through the purchase the user reveals his personal and banking information to the third parties. Later on this information can be used to perform a whole range of illegal operations, at the end leaving the user absolutely penniless.

In order to avoid such dire consequences, the user must remove Windows Anticrashes Utility from his system without any hesitation. By doing so, he will preserve his computer and will give the cyber criminals a chance to rob him.

Download Spyware Removal Tool to Remove* Windows Anticrashes Utility
  • Quick & tested solution for Windows Anticrashes Utility removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Anticrashes Utility

Files associated with Windows Anticrashes Utility infection:

%AppData%\Microsoft\[random].exe

Windows Anticrashes Utility processes to kill:

%AppData%\Microsoft\[random].exe

Remove Windows Anticrashes Utility registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.