Windows Managing System

Windows Managing System Description

ScreenshotAccording to ESG security analysts, Windows Managing System is one of the many fake security programs associated with the FakeVimes family of rogue anti-virus applications. Windows Managing System in particular belongs to a batch of malware released in 2012. The main difference between malware in the most recent batch of rogue anti-virus programs and earlier versions of the FakeVimes members is the fact that newer versions tend to be bundled with the ZeroAccess rootkit, making them particularly vicious and difficult to remove. If you find that Windows Managing System is installed on your computer – and detection is not difficult, since Windows Managing System will do whatever it can to make sure that you notice its presence – use a reliable anti-malware tool with anti-rootkit technology to remove the problem. While Virus Doctor's clones are easily removable because of their long history (dating back at least to 2009), dealing with their associated rootkit infection is quite difficult without the right tools.

Windows Managing System has plenty of clones, including older versions of such as

An Overview of the Windows Managing System Scam

The Windows Managing System scam does not differ significantly from other rogue security programs, which are one of the most common online scams. However, Windows Managing System and its clones are among some of the nastiest versions of this scam, with the capacity to shut down essential Windows components (like the Task Manager or the Registry Editor) as well as being able to find and disable security software on the infected computer system. Basically, Windows Managing System tries to convince the computer user that their machines are seriously infected with multiple viruses and Trojans, through the use of alarming and misleading error messages and pop-up notifications. Then, taking advantage of the victim's panic, Windows Managing System will attempt to convince the victim to purchase a useless 'full version' of Windows Managing System to remove these fake infections. Needless to say, it is definitely not a good idea to allow criminals to gain access to your money or credit card information and ESG security analysts strongly advise against paying for Windows Managing System.

Do You Suspect Your Computer May Be Infected with Windows Managing System & Other Threats? Scan Your Computer with SpyHunter

SpyHunter is a powerful malware remediation and protection tool designed to help provide users with in-depth system security analysis, detection and removal of a wide range of threats like Windows Managing System as well as a one-on-one tech support service. Download SpyHunter's FREE Malware Remover*
Free Remover allows you, subject to a 48-hour waiting period, one remediation and removal for results found. Read our EULA, Privacy Policy & Special Discount Terms. See more Free SpyHunter Remover details.

Technical Information

Screenshots & Other Imagery

Tip: Turn your sound ON and watch the video in Full Screen mode to fully experience how Windows Managing System infects a computer.

Detect and Remove Windows Managing System Rogue

Registry Details

Windows Managing System creates the following registry entry or registry entries:
RegistryKey
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "origkboryd"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sahagent.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\infwin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\atcon.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-3-11_2"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wsbgate.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PavFnSvr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ecengine.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\InternetExplorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\titaninxp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bipcp.exe

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.