Windows Custodian Utility

Windows Custodian Utility Description



Windows Custodian Utility Screenshot 1Windows Custodian Utility is a rogue anti-virus scanner that acts as though Windows Custodian Utility can offer ‘ultimate protection’ against multiple types of PC threats, but SpywareRemove.com malware analysts are here to confirm that Windows Custodian Utility can’t detect any type of malicious software or online attack against your PC. Because Windows Custodian Utility originates from the same FakeVimes family of fake anti-virus products that reuse the same interface with different brand names, you should treat any anti-virus program that bears a strong resemblance to Windows Custodian Utility as potentially malicious. Problems that can arise from tolerating Windows Custodian Utility’s presence on your computer can include browser redirects, an inability to use legitimate security utilities and various fake warning messages that display inaccurate information. However, while Windows Custodian Utility will convince you that buying a registration key is the best way to solve these issues, deleting Windows Custodian Utility itself with any good anti-malware program should be more than sufficient to put a stop to all of these attacks.

How Windows Custodian Utility Does Its Best to Replace Your Real Security with a Hoax


Windows Custodian Utility and other FakeVimes-based PC threats share the same basic marketing and scamming tactics that are also in use by such scamware programs as Extra Antivirus, Windows Pro Web Helper, Windows Telemetry Center, Windows Premium Guard, Windows Safeguard Upgrade, Windows Expert Series, Windows Stability Guard, Windows Risk Minimizer, System Protection Tools, Windows Anti-Malware Patch, Windows Sleek Performance, Windows Protection Maintenance, Windows System Defender, Smart Engine, Windows Firewall Constructor, Windows No-Risk Center, Windows Trouble Taker, Windows Internet Booster, PC Live Guard, My Security Wall, Windows Custom Safety, Windows Custom Management, Windows Interactive Safety, Antivirus Smart Protection, Windows Ultimate Safeguard, Windows Managing System, Windows Daily Adviser, Windows Ultimate Security Patch, Windows Virus Hunter, Windows Security System, Windows Antivirus Rampart, Windows AntiHazard Helper, Windows First-Class Protector, Windows Premium Console, Smart Internet Protection 2012, Windows Enterprise Suite, Windows Guardian Angel, Windows Interactive Security, Windows Shielding Utility, Windows Defending Center, Windows Performance Catalyst, Windows Smart Warden, Windows No-Risk Agent, Windows Privacy Module, Home Malware Cleaner, My Security Shield, Windows Advanced Security Center, Windows Secure Workshop, Windows Security Renewal, Home Safety Essentials, Additional Guard, Windows Basic Antivirus, Windows Web Combat, Windows Software Saver, Windows Antivirus Machine, Windows Care Taker, Security Antivirus, Windows AntiHazard Center, Windows Performance Adviser, Volcano Security Suite, Windows Advanced Toolkit, Windows Maintenance Suite, Fast Antivirus 2009, Windows Safety Manager, Best Antivirus Software, Windows Privacy Extension, Windows Pro Rescuer, Windows Pro Safety Release, Windows Secure Web Patch, Personal Security Sentinel, Windows ProSecurity Scanner, Windows Proactive Safety, Windows Problems Stopper, Windows Guard Tools, Windows Safety Series, Strong Malware Defender, Windows Secure Surfer, Live PC Care, Smart Security, Windows Software Keeper, Windows Pro Defence, My Security Engine, Anti-Malware Lab, Windows Tools Patch, Windows High-End Protection, Windows Enterprise Defender, Personal Internet Security 2011, Windows Abnormality Checker, CleanUp Antivirus, Windows Be-on-Guard Edition, Windows Profound Security, Windows Home Patron, Internet Security Essentials, Windows Health Keeper, PrivacyGuard PRO, Security Master AV, Windows Antihazard Solution, Windows Safety Toolkit, Smart Anti-Malware Protection, Windows Protection Unit, Windows PC Aid, Windows Defence Counsel, Enterprise Suite, Windows Antivirus Care, Windows Efficiency Accelerator, Windows Crucial Scanner, Smart Virus Eliminator, Windows Advanced User Patch, Windows Pro Safety, Windows Safety Maintenance, Windows Proprietary Advisor, XP Smart Security, Windows Antivirus Patch, Windows Safety Checkpoint, Windows Turnkey Console, Windows Secure Workstation, Windows Virtual Angel, Windows Antivirus Release, Smart Internet Protection 2011, Windows Instant Scanner, Windows Web Commander, Windows Protection Master, Windows Security Suite, Windows Personal Doctor, Windows Process Director, Keep Center Keeper, Windows Active Guard, Windows Debug Center, Windows Activity Debugger, Windows Functionality Checker, Total Anti Malware Protection, Windows Privacy Counsel, Windows Safety Wizard, Windows Virtual Security, Windows Smart Partner, Windows Warding System, Windows Private Shield, Windows Maintenance Guard, Internet Security Suite, Windows Malware Sleuth, Windows Premium Defender, Windows Pro Solutions, Windows Virtual Firewall, Activate Ultimate Protection, Windows PRO Scanner, Windows Guard Solutions, Windows ProSecure Scanner, Virus Doctor, Best Malware Protection, Windows Control Series, Windows Threats Destroyer, Windows Multi Control System, Windows Shield Tool, VirusSecurity, Windows Safety Module, Live Enterprise Suite and Windows Active Defender. After Windows Custodian Utility’s installation (which can be enabled via fake codec updates, Trojans like Zlob and fake online scanners), Windows Custodian Utility will start with Windows and display inaccurate system information in the form of scan results and pop-up alerts.
Download SpyHunter Spyware Scanner
This information will notify you about nonexistent infections, including spyware, rootkits and ongoing attacks against your PC that should all be ignored as fake.

Windows Custodian Utility will also attempt to block various types of programs to prevent you from easily removing Windows Custodian Utility from your computer. Programs that Windows Custodian Utility may block can include firewall tools, anti-virus scanners, process-viewing tools (such as Task Manager) and other types of security products. Since some of these attacks block their targets by changing the Windows Registry, even disabling Windows Custodian Utility may not let you have full access to all of your other applications until you’ve used anti-malware software to remove the changes that Windows Custodian Utility has caused to Windows.

The Dangers of a Windows Custodian Utility-Hamstrung Web Browser


Windows Custodian Utility may also alter your web browser for several purposes, including reducing its security, forcing you into contact with malicious websites and preventing you from visiting PC security sites. By modifying your Hosts file, Windows Custodian Utility can redirect your browser on a whim, with its default behavior preferentially triggering redirects after you try to use a search engine. Windows Custodian Utility can also use these attacks to promote its own website.

Unfortunately, redirects are relatively less dangerous than the security attacks that SpywareRemove.com malware experts have found Windows Custodian Utility to be guilty of making against web browsers. By authorizing your PC to run programs with invalid signatures without any warnings, Windows Custodian Utility makes your computer more vulnerable than normal to drive-by-downloads and other attacks that involve harmful files from untrustworthy sources. These problems, combined with Windows Custodian Utility’s software barricade, should be considered good reasons to treat Windows Custodian Utility as a severe threat and delete Windows Custodian Utility with the best anti-malware application that you can use.

Windows Custodian Utility Automatic Detection Tool (Recommended)


Is your PC infected with Windows Custodian Utility? To safely & quickly detect Windows Custodian Utility, we highly recommend you run the malware scanner listed below.



Visual & GUI Characteristics


Windows Custodian Utility Screenshot 2Windows Custodian Utility Screenshot 3Windows Custodian Utility Screenshot 4Windows Custodian Utility Screenshot 5Windows Custodian Utility Screenshot 6Windows Custodian Utility Screenshot 7Windows Custodian Utility Screenshot 8Windows Custodian Utility Screenshot 9Windows Custodian Utility Screenshot 10Windows Custodian Utility Screenshot 11Windows Custodian Utility Screenshot 12

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
  • The following files were created in the system:
    # File Name Detection Count
    1 %APPDATA%\ Protector-jdpf.exe 696
    2 %APPDATA%\ Protector-syyx.exe 145
    3 Windows Custodian Utility.lnk 44
    4 %DesktopDir%\Windows Custodian Utility.lnk N/A
    5 %CommonPrograms%\Windows Custodian Utility.lnk N/A
    6 %AppData%\npswf32.dll N/A
    7 %AppData%\Inspector-[RANDOM CHARACTERS].exe N/A

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"

Additional Information

  • The following messages's were detected:
    # Message
    1Error
    Trojan activity detected. System data security is at risk.
    It is recommended to activate protection and run a full system scan.
    2Warning
    Firewall has blocked a program from accessing the Internet
    C:\program files\internet explorer\iexplore.exe
    is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
    3Warning! Identity theft attempt Detected
    Hidden connection IP: 58.82.12.124
    Target: Your passwords for sites
Posted: April 4, 2012 | By
Share:
Follow Me on Pinterest More More
Threat Level: 10/10
1 Star2 Stars3 Stars4 Stars5 Stars (1 votes, average: 5.00 out of 5)
Loading ... Loading ...
Rate this article:
Detection Count: 5

Leave a Reply

What is 10 + 15 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)