Windows Anticrashes Utility

Windows Anticrashes Utility is a rogue security program that infects your computer with the assistance of Fake Microsoft Security Essentials Alert Trojans. Both Windows Anticrashes Utility and the affiliated Trojan create fake infection errors and other pop-up warnings to imitate anti-malware functions, but Windows Anticrashes Utility and the Fake Microsoft Security Essentials Alert Trojan have no ability to find or delete threats to your PC. Hasty removal of Windows Anticrashes Utility by using anti-malware scanners is strongly encouraged, since Windows Anticrashes Utility will attack your computer's security by blocking application use and hijacking popular web browsers.

Fake Alerts Related to Windows Anticrashes Utility

The Fake Microsoft Security Essentials Alert Trojan that infects your PC with Windows Anticrashes Utility will try to infect your system without being detected, usually by way of browser exploits. Disabling Flash and JavaScript and installing browser and security application updates regularly will reduce the chances of this happening. Most Fake Microsoft Security Essentials Alert Trojans will begin installing Windows Anticrashes Utility or another rogue security program by creating fake errors similar to the following:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.

Threat prevention solution found
Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.
Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a seriuos [sic] possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press 'OK' to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.

Once these fake errors have convinced you that a legitimate anti-virus program is being installed, the Fake Microsoft Security Essentials Alert Trojan will drop its payload onto your PC in the form of Windows Anticrashes Utility or a related rogue security program. As seen with the examples below, Windows Anticrashes Utility will create fake infection warnings and other pop-ups on a regular basis to convince you that Windows Anticrashes Utility is really protecting your PC from infections:

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

Warning!
Location: [application file path]
Viruses: Backdoor.Win32.Rbot

Warning!
Name: [application file name]
Name: [application file path]
Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.

Warning! Database update failed!
Database update failed!
Outdated viruses databases are not effective and can't [sic] guarantee adequate protection and security for your PC!
Click here to get the full version of the product and update the database!

System component corrupted!
System reboot error has occurred due to lsass.exe system process failure.
This may be caused by severe malware infections.
Automatic restore of lsass.exe backup copy completed.
The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.

Warning! Running trial version!
The security of your computer has been compromised!
Now running trial version of the software!
Click here to purchase the full version of the software and get full protection for your PC!

These pop-ups don't indicate that there are any real infections on your PC other than, of course, Windows Anticrashes Utility itself. In fact, Windows Anticrashes Utility is very likely to announce that critical programs are infected even if they're in perfect condition.

You may also see the above errors if you've become infected by one of Windows Anticrashes Utility's many related rogue security programs like Windows Necessary Firewall, Windows Troubles Solver, Windows Custom Settings and Windows Risks Preventions.

Other Malicious Utility that Windows Anticrashes Utility Provides

Other problems associated with Windows Anticrashes Utility will directly attack your PC security and privacy instead of just misleading you:

• Windows Anticrashes Utility will launch itself whenever Windows starts normally, and may remain active in memory after you attempt to close Windows Anticrashes Utility.
• Windows Anticrashes Utility will prevent various applications from functioning properly. This includes popular anti-virus scanners and system utilities like the Registry Editor and Task Manager. Crashes provoked by Windows Anticrashes Utility may utilize some fake errors like the ones above to make you think that the crash isn't Windows Anticrashes Utility's fault.
• Windows Anticrashes Utility will also dominate your web browser, controlling its very ability to display websites. Symptoms of these browser hijacks include changed homepage, strange errors or links where they wouldn't ordinarily appear and search results that redirect you to unusual websites.

Most of Windows Anticrashes Utility's attacks are enabled by way of the Windows Registry. Undoing this Registry damage can be difficult to do without risking harm to your OS, and it's strongly recommended that you remove Windows Anticrashes Utility by using security program.

File System Modifications

• The following files were created in the system:
  

  #	File Name
  1	%AppData%\Microsoft\[RANDOM CHARACTERS].exe

Registry Modifications

• The following newly produced Registry Values are:
  HKEY..\..\..\..{Subkeys}HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell "%AppData%\Microsoft\[RANDOM CHARACTERS].exe"

Additional Information on Windows Anticrashes Utility

• The following messages's were detected:
  

  #	Message
  1	Microsoft Security Essentials Alert Potential Threat Details Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.
  2	Threat prevention solution found Security system analysis has revealed critical file system vulnerability caused by severe malware attacks. Risk of system files infection: The detected vulnerability may result in unauthorized access to private information and hard drive data with a serious possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press 'OK' to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.
  3	System Security Warning Attempt to modify register key entries is detected. Register entries analysis is recommended.
  4	Warning! Location: c:\windows\system32\taskmgr.exe Viruses: Backdoor.Win32.Rbot