Windows Abnormality Checker - How to remove?


Windows Abnormality Checker is the rogue anti-spyware that was released by Fake Vimes, the group of scammers who seek to increase their income a little bit. In order to make the money, they firstly create a need of their licensed remover, so they display fake alerts and security scanners reporting about numerous viruses detected. The trialware of Windows Abnormality Checker does the same thing: it starts ‘checking’ the system for malware and additionally returns fake results saying that there are dangerous viruses detected. However, all those keyloggers or trojans are harmless system files that are reported by Windows Abnormality Checker for the only reason – to make you scared and push you into purchasing its license. Keep in mind that Windows Abnormality Checker is a fake anti-virus that must be removed from the system without any delay.

Don’t think that you can’t be infected by this rogue anti-spyware. Windows Abnormality Checker gets on the system unexpected and without asking users permission. It simply uses trojan horses that spot vulnerabilities in the Operating System and, additionally, upload malicious files that are needed for this fake anti-virus. Besides,thanks to some unnoticeable modifications, this rogue is also set to start as soon as PC is rebooted and additionally displays such or similar alerts that should never be trusted:

Firewall has blocked a program from accessing the Internet
C:\program files\internet explorer\iexplore.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.

Attempt to modify Registry key entries detected.
Registry entry analysis recommended.

Warning! Spambot detected!
Attention! A spambot sending viruses from your e-mail has been detected on your PC.

Keylogger ativity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

Like it has been already said, all these alerts and scanners displayed by Windows Abnormality Checker must be ignored because they may be reporting about legitimate files that are important for your computer’s functionality. The idea of doing this is really simple – malware seeks to convince you to believe that false information and then pushes you into purchasing its licensed version. However, we highly recommend to remove Windows Abnormality Checker instead of paying for its license. For that you will only need to run a full system scan with reputable anti-spyware, like spyhunter or Spyware Doctor (2012 version).  Fake-registering this rogue with serial 0W000-000B0-00T00-E0020 might make installation of removal software easier. Keep in mind that if not eliminated, this malware  will initiate annoying google redirections and may even download more malware on your computer. This version of FakeVimes rogue might be distributed with other parasites so I recommend scanning your PC with anti-malware program even if you delete the files manually.

Do not forget to delete registry keys of Windows Abnormality Checker. Although they cannot re-download parasites directly, leaving them will keep antivirus programs disabled.

Video HowTO on Windows Abnormality Checker removal


Note: Windows Abnormality Checker is being replaced by Defender PRO 2015

Automatic Windows Abnormality Checker removal tools


Other tools

  0   0
  0   0
    Malwarebytes Anti-Malware
  Download Reimage for Windows Abnormality Checker detectionNote: Reimage trial provides detection of parasite like Windows Abnormality Checker and assists in its removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.
  We might be affiliated with some of these programs. Full information is available in disclosure

Manual Windows Abnormality Checker removal


Important Note: Although it is possible to manually remove Windows Abnormality Checker, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Reimage or other tools found on


It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other Windows Abnormality Checker infected files and get help in Windows Abnormality Checker removal by using Reimage scanner. 


Windows Abnormality Checker screenshots

August 17th, 2016 21:36, August 17th, 2016 21:36
Fill this form to subscribe to our newsletter

4 thoughts on “Windows Abnormality Checker

  1. Greg

    Are you kidding me? Took forever to scan, then can’t remove virus without pay even in the first day of trial? Slow, and there are tons of free virus removal applications. What a joke. F!

    1. Giedrius Majauskas (admin)
      Post author

      Greg: there are couple free trials or limited editions. One or 2 completely free (one of them without real time protection). None best of my knowledge provides automated malicious process killing before the scan, but feel free to use them if you get process killed manually (we provide instructions for that too).

  2. keetz

    I would have purchased the program for the ongoing protection if I were able to remove the malware with the trial version. Otherwise, it’s not much different than the strategy cooked up by the creators of Abnormality Checker.

    1. Giedrius Majauskas (admin)
      Post author

      SH kills malware process automatically and helps determine what places it resides for free. It is up to you if you do the rest manually, or with automated program. I would say the reverse is true : the authors of Windows Abnormality Checker imitate all legitimate makers of antivirus with the difference, that Windows Abnormality Checker displays Fake infections, and legitimate programs display real ones. Additionally, legitimate programs do not install without your consent and uninstall normally.


Leave a Reply

Your email address will not be published. Required fields are marked *