Windows Utility Tool

21 January 2011 Rogue 0 Comment

Windows Utility Tool is a rogue application that will be promoted on scam web sites as a legitimate software. This one is just a clone of previous variants like Windows Security & Control and Windows Optimization and Security. All of these programs were created only for a fraudulent purposes and has no capability to protect a computer neither remove any threats. Scanning with fabricated results is one of Windows Utility Tool’s way to mislead users and convince them that it is for real. Aside from that, Windows Utility Tool also issues fake warning alerts that will further mind-set a victims that computer is in harm. One of these messages is:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click ‘show details’ to learn more.

From the time this fake program has embedded itself into the system, all it does was to deceive users and in this way it can promote Windows Utility Tool as the only program that can solve computer difficulties. It will force victims to obtain the licensed version since the once installed was just an unregistered copy. Remove Windows Utility Tool and never pay for the full version. It will do nothing but extract money from your credit card account. Windows Utility Tool is rogue and should be avoided at all means.

Critical Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Windows Utility Tool Removal Procedures

Manual Removal:
1. Stop Windows Utility Tool process by pressing Ctrl+Alt+Del. Windows Task Manager will open. Look for the following process:
(random characters).exe

2. Update your installed anti-virus program.
3. Run a full system scan and clean/delete all detected infected file(s). A manual removal of virus-related files should also be performed.
4. Edit Windows registry and delete Windows Utility Tool entries. [how to edit registry]
5. Exit registry editor.
6. Remove Windows Utility Tool start-up entry by going to Start > Run, type msconfig on the “Open” dialog box. System Configuration Utility will open. Go to Startup tab and uncheck the following Startup item(s):
(random characters).exe

7. Click Apply and restart Windows.

Windows Utility Tool Removal Tool:
In order to completely remove the threat, click here to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.

Online Virus Scanner:
Another way to remove a virus without the need to install additional anti-virus application is to perform a thorough scan with free Online Virus Scanner that can be found here or on websites of legitimate anti-virus and security provider.

Technical Details and Additional Information:

To deceive computer users even more, this fake application will continuously pop-up fake alerts including the following:

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click ‘show details’ to learn more.

Malicious Files Added by Windows Utility Tool:
%AppData%\[random].exe

Windows Utility Tool Registry Entries:
HKEY_CURRENT_USERSoftwareMicrosoftWindows NTCurrentVersionWinlogon “Shell” = “%AppData%[random].exe”