Windows Custom Management appears to be a powerful tool to manage your computer but in reality it is a rogue virus that uses malicious tactics to swindle your money away. This software is created by malware programmers and distributed through hacked websites that use Trojans to download this virus into a computer. After getting into your computer, Windows Custom Management will warn you of some errors with your copy of windows software. The target of this program is to scare you of malware infections found inyour PC then ask you to buy the pro version of “Windows Custom Management” software so it could fix the problem with your computer.
Errors from this virus may read:
“Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.”
“Warning! Identity Theft attempt detected!
Hidden connection IP: 210.1.58.100
Target: Microsoft corporation keys
Your IP: 127.0.0.1”
“Error
There’s a suspicious software running on your PC.
For more details, run a system file check.”
Please remember, Windows Custom Management is a fake program, you should not pay attention to its alerts as they are fake as well. This nasty thing may pretend to be scanning your computer and then it will generate a scan report about your system that will mention some files detected as malicious activities or infected files. The worst thing about this virus is that it may list even some useful and legitimate softwares of you as a virus threat. Moreover, it Windows Custom Management will customize some configurations on your system and will block you from accessing task manager and registry editor tool REGEDIT. Simply, it is recommended to take a quick action to remove Windows Custom Management virus from your infected PC as soon as possible, instead of buying its full version which is quite useless and a waist of your money and time.
How to uninstall Windows Custom Management virus manually:
To remove this virus manually, complete the following set of tasks. Do not forget to create a backup before getting started to the manual removal guide.
To prform manual removal steps, you may need to learn,
How to stop a process
How to delete registry entries
Stop Windows Custom Management processes:
Protector.exe
Disable Windows Custom Management DLL files:
npswf32.dll
Removee Windows Custom Management Registry Entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
Delete Windows Custom Management files:
%AppData%\Protector.exe
Auto Removal
To remove this virus Automatically, We suggest following tools:
Malware Bytes Anti-Malware (Download)
HitMan Pro Anti-Malware (Download)
