- Blocks internet connection
- Block exe files from running
- Installs itself without permissions
- Connects to the internet without permission
- Normal system programs crash immediatelly
- Slow internet connection
- System crashes
- Annoying Pop-up's
- Slow Computer
Windows Functionality Checker
Windows Functionality Checker is the newest addition to the highly active Rogue.VirusDoctor family, with such infamous clones as Windows Protection Master, Windows Performance Catalyst, Smart Security, etc. Like all of its predecessors, the rogue antispyware can be very dangerous to your personal data and can cause grave financial loss. Therefore, you need to remove Windows Functionality Checker from your PC as soon as possible. Here is a list of a few elements that will help you identify Windows Functionality Checker in your computer:
• The same interface as of its previous clones
Warning! Virus Detected
Windows Functionality Checker can install itself without permission, or can trick YOU into installing it yourself. Ultimately, there are many online paths for the malware to infect the system, so you have to be careful when browsing or opening files, sent by unfamiliar sources. Once installed, malware performs a bogus threat scan. This is when all the fake notifications, mentioned above, start coming up.
Windows Functionality Checker will also alert you with this bogus warning, imitating Windows Security:
The rogue then reports that FireWall, Automatic updates and Antivirus Protection are set OFF, threatening you further with a non-existent system’s security. It even lists Server-Telnet, Trojan-Dropper, Trojan-Malifinder, Trojan-Proxy and other malware as fake threats active in your computer. Do not be alarmed, and do not trust numerous pop-ups and warnings, as they are all fake, and are there to trick you into believing that your computer does have a valid infection.
Windows Functionality Checker will recommend buying its full version antispyware program, but you need to ignore this too. If you buy the product, it will NOT protect your computer from real threats, on the contrary, it will collect your banking details! This information will allow hijackers to use your details and your assets in their convenience! So be careful how you handle this rogue, and we recommend you remove Windows Functionality Checker instantly. Using legitimate antispyware is the best solution in this case. It will not only help you resume to normal Windows running, but will protect you from other malware in the future. However, if you are experienced with Windows, you can remove the rogue manually. Just make sure you delete ALL infected files, so that the infection does not regenerate and make more damage.
How to renew your internet connection:This rogue antispyware blocks your Internet connection to prevent you from removing the rogue application. To enable the Internet connection, please follow these instructions:
How to manually remove Windows Functionality Checker
Files associated with Windows Functionality Checker infection:
%StartMenu%\Programs\Windows Functionality Checker.lnk
Windows Functionality Checker DLL's to remove:
Windows Functionality Checker processes to kill:
Remove Windows Functionality Checker registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "ID" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-2-17_2"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "rudbxijemb"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe