1 of 9
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Shows commercial adverts
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

Windows Efficiency Manager

With all the rogue antispyware applications flooding the Internet it can be easy to become lax about the threats they pose to your system. Do not make that mistake with Windows Efficiency Manager. This seditious rogue with the misleading name poses no benefit to your system, and was only developed to fleece you out of your money without offering anything of value in return.

Deriving from the same despicable family of roguewares as Windows Optimal Solution, it will lodge a stealth attack on your system and you will be none the wiser until it’s too late. Windows Efficiency Manager makes use of established forms of infection, using seditious Trojans to root its infection in its host PCs. These Trojans are distributed via fake online malware scanners and treacherous browser hijackers.

Download Spyware Removal Tool to Remove* Windows Efficiency Manager
  • Quick & tested solution for Windows Efficiency Manager removal.
  • 100% Free Scan for Windows

Because Windows Efficiency Manager’s infiltration into the system is virtually undetectable, users will have a hard time to identify and remove Windows Efficiency Manager without help. Windows Efficiency Manager will only reveal its presence on the system when it starts its attack by spamming the user with various fake security messages. These falsely generated warnings are meant to scare the user into paying for Windows Efficiency Manager. Do not pay any attention to them, and be on the lookout for the following:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.”

System component corrupted!
System reboot error has occurred due to lsass.exe system process failure.
This may be caused by severe malware infections.
Automatic restore of lsass.exe backup copy completed.
The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.

Windows Safety Protection will then prompt the PC owner to scan his system. This will start a fake scan of the PC which ultimately states that a particular file is infected with Trojan.Horse.Win32.PAV.64.a. Windows Safety Protection then prompts the user to install Windows Safety Protection to remove the virus. The text of this prompt is:

Threat prevention solution found
Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.
Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a seriuos possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press 'OK' to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.

Name: firefox.exe
Name: c:\program files\firefox\firefox.exe
Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.

It goes without saying that none of these fake security notifications should even receive any attention. Users who did not manage to get rid of Windows Efficiency Manager in time complained about blocked Internet connections and not being able to access the Desktop. Follow these instructions to open your Internet connection again and to be able to access your Desktop:

1. Reboot your system. You will find the Windows Efficiency Manager startup screen blocking access to your Desktop. Click the “OK” button to make it go away. The malware will start a fake system scan.
2. Wait until the scan is done. Once the scan is finished you will see another fake security notice. Click “OK” one more time.
3. Make the notification go away by clicking on the red “X” at the right top of it.
4. It should now disappear and you will be able to access your desktop again.

Following the above instructions should help you regain access to your Desktop again, but you still need to destroy Windows Efficiency Manager in order to regain full control of your PC.

Download Spyware Removal Tool to Remove* Windows Efficiency Manager
  • Quick & tested solution for Windows Efficiency Manager removal.
  • 100% Free Scan for Windows

How to manually remove Windows Efficiency Manager

Files associated with Windows Efficiency Manager infection:


Windows Efficiency Manager processes to kill:


Remove Windows Efficiency Manager registry entries:

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell “%AppData%\[random].exe”

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.