Home > Rogue Anti-Spyware > Windows Work Checker

How to remove Windows Work Checker?

June 9th, 2011

What is Windows Work Checker?

Windows Work Checker is a fake antivirus from the multi-name rogue family claiming to be an upgrade to Microsoft Security Essentials. Typically, one gets infected after downloading an executable presented as video file, some sort of free codecs or by fake antivirus scan pages on infected websites. Typically, prior seeing main Windows Work Checker window, one sees a window mimicking Microsoft’s Security Essential – a legitimate antivirus. It claims that an unknown Win32/Trojan is detected and that one needs to find a better program to identify it and remove.

Microsoft Security Essentials Alert
Potential Threat Details

Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click ‘show details’ to learn more.

Once user clicks on such message, the fake scanner will pretend to search for solution, and then suggest to install one of multi-named rogue skins like Windows Work Checker (they change daily).
Windows Work Checker will detect infections in completely harmless files. It will claim that your system is heavily infected, and will not allow uninstall it (no real antiviruses do that). Windows Work Checker will alert about various attacks to ones PC, even if the PC is disconnected from internet. It will try to disable and stop legitimate programs from launching, to prevent from removal. This fake antivirus will refuse to remove threats or even close its window without being paid. Thus it is very annoying.
To remove Windows Work Checker, you will need to close its window. This can be done by allowing it to scan your PC and then going to payment window. At this point malware has to allow external processes, so it can be closed. After that perform following steps to get rid of it:
1. Download and launch Process Explorer. You might have to rename it to .com to prevent Windows Work Checker from stopping it.
2. Make sure you see all file paths in Process Explorer. Stop processes listed bellow, and everything that is launched from %AppData%, %Application Data% or %Temp%.
3. Launch registry filing utility: http://www.2-viruses.com/wp-content/uploads/exeregfix.reg
4. Launch Browser of your choice and disable proxy server in it. Windows Work Checker might filter your browsing results and prevent browser from functioning.
5. Download an Anti-Malware tools : Spyhunter, Malwarebytes Anti-Malware, Hitman Pro. Do a full system scan and remove Windows Work Checker files they detect.
6. Upgrade your anti-virus and anti-malware protection to prevent such infections from happening again. Windows Work Checker prevention is much easier than removal. Full internet security suites or anti-malware applications like Spyware Doctor or mbam would have stopped the infection from happening.


Windows Work Checker is Extremely dangerous

arrow Windows Work Checker is a corrupt Anti-Spyware program
arrow Windows Work Checker may spread via Trojans
arrow Windows Work Checker may display fake security messages
arrow Windows Work Checker may install additional spyware to your computer
arrow Windows Work Checker may repair its files, spread or update by itself
arrow Windows Work Checker violates your privacy and compromises your security
Download Spyhunter
for Windows Work Checker detection

Note: Spyhunter trial provides detection of parasite like Windows Work Checker and assists in its removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.



Manual Windows Work Checker removal


Important Note: Although it is possible to manually remove Windows Work Checker, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Spyhunter or other malware and spyware removal applications found on 2-viruses.com.
Stop these Windows Work Checker processes:
Remove these Windows Work Checker Registry Entries:
Remove these Windows Work Checker files:
It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other Windows Work Checker infected files and get help in Windows Work Checker removal by using free Spyhunter scanner. It comes with free real-time protection module that helps preventing Windows Work Checker and similar threats.

Windows Work Checker is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only Windows Work Checker can help you to remove it after you download the trial version. As soon as the victim downloads Windows Work Checker trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, Windows Work Checker offers to buy the full version to fix these false errors. If the user agrees, Windows Work Checker does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.

Some Rogue Anti-Spyware, such as Windows Work Checker, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install Windows Work Checker, which is another way for Rogue Anti-Spyware to spread itself.

Most of rogue Anti-Spyware, such as Windows Work Checker, is nearly impossible to remove manually.


How to tell if your PC has been infected by a Rogue Anti-Spyware such as Windows Work Checker?

Numerous undesirable and annoying pop-ups: A typical Rogue Anti-Spyware parasite keeps track of your internet browsing habits, sending your browsing history data to remote servers, owned by third party companies that use this information to advertise their products via numerous pop-ups, toolbars, hijacked homepages and spam letters. All these undesirable advertising methods are used on the victims of Rogue Anti-Spyware.
Changed or new icons: Sometimes, Rogue Anti-Spyware installs unwanted software to a victim’s PC without user’s knowledge and consent. This may lead to slower PC performance and stability, as well as more unwanted programs you can't remove.

Rogue Anti-Spyware

  1. No comments yet.
  1. No trackbacks yet.