Click on screenshot to zoom
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Shows commercial adverts
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

Windows Passport Utility

Windows Passport Utility is a rogue system optimization application which is created to look like a real security program. This is the usual tactics of rogue antispyware, as the main goal of its creators is quick financial gain. The new threat belongs to a huge group of rogues which make up the Fake Microsoft Security Essentials fraud. Other rogues in this family include Windows Process Regulator, Windows Power Expansion, Windows Defence Center, and so on.

One of the ways for Windows Passport Utility to enter your computer is through spam email. Spam email is sent out randomly, and you can either get a message from an unknown sender or from your acquaintance. That is not to say that your friends are sending computer threats to you, simply their accounts might be hacked and used for the malware distribution. The point is that Windows Passport Utility is very good at slithering into your computer unawares, so it is always a good thing to check whether you have been infected already. For that we recommend to use the suggested malware scanner.

Download Spyware Removal Tool to Remove* Windows Passport Utility
  • Quick & tested solution for Windows Passport Utility removal.
  • 100% Free Scan for Windows

When Windows Passport Utility entrenches in your system it, the rogue exhibits the usual behavior which includes performing a fake system scan. During the scan you will see the names of real Windows directories in the scan bar, as well as your computer’s configurations at the top right corner of the rogue’s interface, but these details are being used in order to make you believe that this whole scam is real. Yet everything is very far from being genuine and you should not pay attention to any of the messages that you receive from Windows Passport Utility. Here are the examples of a few notifications:

Name: firefox.exe
Name: c:\program files\firefox\firefox.exe
Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.

Threat prevention solution found
Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.
Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a seriuos possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press 'OK' to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

Aside from blocking .exe files from running and slowing down your internet connection, Windows Passport Utility also has other ways to make its stay in your computer longer. These rogues have the ability to block your desktop. You will not be allowed to access your taskbar or your icons, unless you follow these instructions to get your desktop back:

1. Restart your computer and wait for it to load, until there is rogue’s application on your screen. Click the “OK” button to make it disappear.
2. The rogue will initiate a fake system scan. When it is done, you will see another application. Click the “OK” button again.
3. Close the notification by clicking on the red “X” at the right top of it.
4. It will vanish and you will have your desktop back.

Windows Passport Utility is there in your computer to make you pay for a service that does not exist. You need to keep your credit card number to yourself; otherwise you will be robbed to the very last cent. Take care of your security and destroy Windows Passport Utility as fast as you can. It is possible to do it manually, but you are not sure of your computing skills, you can always use a reliable malware remover.

Download Spyware Removal Tool to Remove* Windows Passport Utility
  • Quick & tested solution for Windows Passport Utility removal.
  • 100% Free Scan for Windows

How to manually remove Windows Passport Utility

Files associated with Windows Passport Utility infection:


Windows Passport Utility processes to kill:


Remove Windows Passport Utility registry entries:

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell “%AppData%\[random].exe


  1. Remove Windows Passport Utility Apr 2, 2011

    Great information, thanks for providing such useful informative blog. After followed all instruction, I have successfully removed virus from my computer

  2. Dina Apr 2, 2011

    could not find the mentioned path or folder. but i restored my friend's computer infected by the above virus and i have undone the infection.

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.