Home Malware Programs Rogue Anti-Spyware Programs Windows Stable Work

Windows Stable Work

Posted: June 18, 2011

Windows Stable Work is rogue security software that pretends to analyze network safety, media components and other aspects of your PC, thereafter grading them on security. These seemingly useful functions all turn sour when Windows Stable Work continues to create fake negative scores and fake warnings about infections to make you think that your computer is under attack from many directions. Windows Stable Work may also crash programs or control which websites your web browser visits. Since Windows Stable Work is often accompanied by Trojan threats, it's suggested that you use anti-malware software to delete Windows Stable Work and other malicious programs from your PC.

The Mount That Windows Stable Work Uses to Trot Into Your PC

As of June 2011, Windows Stable Work is a recent clone of other rogue programs that use the same interface to fool you into believing that they're all security products. Windows Stable Work and its clones, such as Windows Examination Utility, Windows Verifying Center, Windows Averting System and Windows Necessary Firewall can't detect or delete computer threats, but that doesn't stop them from pretending to do so.

Since Windows Stable Work is marketed on malicious websites as though it were a regular anti-virus program, you may download Windows Stable Work before realizing that it's malicious. More often than not, though, you'll only become infected by Windows Stable Work after you've acquired a secondary infection - the Fake Microsoft Security Essentials Alert Trojan.

Fake Microsoft Security Essentials Alert will create pop-ups like the example below and try to convince you that you're infected with an 'Unknown Win32/Trojan' to make you want to install Windows Stable Work or one of its twins.

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.

This installation process will slap Windows Stable Work into the middle of your default Windows startup routine and immediately reboot so that Windows Stable Work can take advantage of the fact.

How Windows Stable Work Carefully Destabilizes Your Computer

Windows Stable Work has been linked to many different attacks that are typical for rogue threats like itself:

  • Windows Stable Work can create fake errors that try to deceive you about your PC's health. These errors will notify you about unreal infections and make it seem as though crucial programs are infected. The reality, however, is that your computer isn't nearly as badly off as Windows Stable Work would like you to believe.

    System Security Warning
    Attempt to modify register key entries is detected. Register entries analysis is recommended.

    Warning! Database update failed!
    Database update failed!
    Outdated viruses databases are not effective and can't [sic] guarantee adequate protection and security for your PC!
    Click here to get the full version of the product and update the database!

    System component corrupted!
    System reboot error has occurred due to lsass.exe system process failure.
    This may be caused by severe malware infections.
    Automatic restore of lsass.exe backup copy completed.
    The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.

    Warning! Running trial version!
    The security of your computer has been compromised!
    Now running trial version of the software!
    Click here to purchase the full version of the software and get full protection for your PC!

    Warning!
    Location: [application file path]
    Viruses: Backdoor.Win32.Rbot

    Warning!
    Name: [application file name]
    Name: [application file path]
    Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.

  • Windows Stable Work can also block programs to make it seem more likely that they're infected. Security software and tools that could help you monitor or remove Windows Stable Work are very likely to be blocked. Once you've gotten rid of Windows Stable Work these programs should function normally again.
  • One of Windows Stable Work's most dangerous attacks, however, is its ability to hijack your browser and change your online destinations. Windows Stable Work may set a malicious site to be your homepage, change your search results, create pop-ups or try to confuse you with fake error screens.

The ideal method of uninstalling Windows Stable Work is to reboot into Safe Mode by tapping F8 during system startup and then running a full system scan with updated security software.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %AppData%\Microsoft\[RANDOM CHARACTERS].exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell "%AppData%\Microsoft\[RANDOM CHARACTERS].exe"

Additional Information on Windows Stable Work

  • The following messages's were detected:
    # Message
    1 Warning! Database update failed!
    Database update failed!
    Outdated viruses databases are not effective and can't [sic] guarantee adequate protection and security for your PC!
    Click here to get the full version of the product and update the database!
    2 System Security Warning
    Attempt to modify register key entries is detected. Register entries analysis is recommended.
    3 Microsoft Security Essentials Alert
    Potential Threat Details
    Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.
    4 System component corrupted!
    System reboot error has occurred due to lsass.exe system process failure.
    This may be caused by severe malware infections.
    Automatic restore of lsass.exe backup copy completed.
    The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.
    5 Warning!
    Location: [application file path]
    Viruses: Backdoor.Win32.Rbot
    6 Warning! Running trial version!
    The security of your computer has been compromised!
    Now running trial version of the software!
    Click here to purchase the full version of the software and get full protection for your PC!
    7 Warning!
    Name: [application file name]
    Name: [application file path]
    Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.
Loading...