Click on screenshot to zoom
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:
WindowsInspectionUtility

Windows Inspection Utility

It has been determined that the seemingly genuine looking Windows Inspection Utility is in fact nothing more than a malicious fake security tool out to rip honest consumers off. It is another clone of the recently released Windows Oversight Center and Windows Supervision Center. It is a rogue antispyware application which, just like any other rogue out there, tries its best to project the image of a legitimate security program. However, despite what it would like you to believe, Windows Inspection Utility has no ability to detect or remove any type of threat from the system, and is nothing more than a harmful infection in itself.

Since it is hard to determine whether you have been infected by this rogue immediately, it may remain in your computer for some time, before you notice that something is wrong. For that reason it is recommended that you scan your computer regularly for check-ups with the suggested malware detector.

Download Spyware Removal Tool to Remove* Windows Inspection Utility
  • Quick & tested solution for Windows Inspection Utility removal.
  • 100% Free Scan for Windows

Windows Inspection Utility uses various established forms of infection, including rubbish online malware scanners and harmful browser hijackers. These browser hijackers intentionally and forcefully redirect users’ browsing and search sessions to its compromised landing pages, in an effort to infect the users with the Windows Inspection Utility infection. Other forms of infection include Windows Inspection Utility bundling its Trojans and malware together with other legitimate security updates and downloads obtained from third party websites.

When Windows Inspection Utility gets installed in the computer, it displays the usual rogue behavior by sending fake security alert messages, telling the user it has detected a parasite called UnknownWin32/Trojan. The user is prompted to perform a fake system scan in order to check for any other threats residing in the system. One of the messages received from the rogue is as follows:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.

Were you to perform the “scan”, you will get another message saying:

Threat prevention solution found
Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.
Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a serious possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press 'OK' to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.

Naturally, all these claims are false, and you should never follow the instructions given to you by Windows Inspection Utility. This rogue only wants your money, and it would be able to lay its hands on your financial funds were you to provide your credit card number and the CVV2 code in the program’s purchase window. You need to refrain from doing that, and close the program immediately.

Do not allow Windows Inspection Utility to destroy your PC and tap into your bank account. Get yourself a good malware removal tool, which will detect and destroy Windows Inspection Utility automatically without any delay. You need to safeguard your computer against rogues like that if you want to have a system which operates efficiently.

Download Spyware Removal Tool to Remove* Windows Inspection Utility
  • Quick & tested solution for Windows Inspection Utility removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Inspection Utility

Files associated with infection (Windows Inspection Utility):

tcsmaa.exe
%AppData%\Microsoft\[random].exe

Processes to kill (Windows Inspection Utility):

tcsmaa.exe
%AppData%\Microsoft\[random].exe

Remove registry entries (Windows Inspection Utility):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
KEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.