Windows Custom Management: what it is and how to remove it
Windows Custom Management is a fake rogue security program, which is made only to scare you into thinking that your PC is highly infected with various Trojans and viruses. It is a well-known scam technique that is used by this and many other scareware programs that are spreading around the internet, usually without user permission or consent.
Facts checked October 7, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
An automatic scan checks installed programs, startup items and browser extensions for anything that came with Windows Custom Management.
Do it yourself · free Remove Windows Custom Management yourself 5 steps, about 15 minutes, no software needed.
Start the steps
Windows Custom Management: summary
| Damage | You will lose your money by purchasing this app; also the credit card details might be disclosed to cybercriminals |
|---|---|
| Name | Windows Custom Management |
| Type | Malware, rogue antivirus |
| Infiltration | Trojan downloaders, fake online scanners, malicious or repacked programs, etc. |
| Detection names | No Microsoft detection name is known |
| Distribution | Not recorded in the old report |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 5 more facts
| Symptoms | An unknown program in Installed apps |
|---|---|
| Evidence | One write-up by a security site; details still limited |
| Program | Windows Custom Management |
| First seen | 27 April 2021 |
| Facts checked | 7 October 2026 |
Is Windows Custom Management a real security program?
From our report of Apr 2021 · not reviewed since
Windows Custom Management - fake antispyware that tries to imitate Windows Defender
Windows Custom Management is a fake rogue security program, which is made only to scare you into thinking that your PC is highly infected with various Trojans and viruses.
It is a well-known scam technique that is used by this and many other scareware programs that are spreading around the internet, usually without user permission or consent.
The only infection you have on your computer is this program itself, and it's a dropper, which installed it in the first place. When installed, this scam application would perform an almost instantaneous computer scan and find hundreds of malicious files and viruses on your system.
After that, it will ask you to buy its full and licensed version in order to. Don't do that - it's a scam. This program is itself a virus and won't remove anything or protect you from real threats. The only thing you need to remove is Windows Custom Management.
From our report of Apr 2021 · not reviewed since
Rogue anti-spyware can take over Windows
The rogue displays alert every 10 to 15 minutes that your PC is under attack from an external server.
It mimics the user interface of Windows Security Center, and it says that you don't have an antivirus program. After that, the virus will ask you to buy a licensed version of itself to clean your PC.
Fake alerts will look like this:
Please do not pay attention to these notifications, as they are fabricated - this program is totally useless, and it only tries to steal your money. You can try uninstalling it manually, as explained below, or by performing a full scan with or .
It is important to note that the virus might also affect all the installed web browsers, including Google Chrome or Mozilla Firefox. After you delete the rogue, make sure you either reset them or clean them accordingly. can help you with that.
From our report of Apr 2021 · not reviewed since
More from our earlier report on Windows Custom Management
- Use legitimate anti-malware software to delete all the malicious component of this rogue program
- For best results, perform a full system scan with complementary software
- Torrent Alert Recommended: Please use secure encrypted protocol for torrent links.Torrent link detected!
- Receiving this notification means that you have violated the copyright laws.
- Using Torrent for downloading movies and licensed software shall be prosecuted and you may be sued for cybercrime and breach of law under the SOPA legislation.
- Error Software without a digital signature detected.
- Your system files are at risk.
- We strongly advise you to activate your protection.
- System information security is at risk.
- It is recommended to activate protection and run a full system scan.
How to remove Windows Custom Management
Nothing it reports is real.
These steps remove it and undo a payment if you made one.
Step 1: Do not pay, and undo a payment if you made one
Nothing that Windows Custom Management says it found needs fixing by Windows Custom Management. Close its windows and do not enter card details.
If you bought it, contact your bank or card issuer about a dispute and cancel any renewal, keeping the receipt e-mail as evidence. Uninstalling it from Windows 11 or Windows 10 removes the program but leaves the subscription running.
Full procedure with screenshots: What to do after paying a scammer
Step 2: Uninstall Windows Custom Management
Windows Custom Management is removed like any other program, from the list of installed apps. In Windows 11 that is Settings > Apps > Installed apps, in Windows 10 Settings > Apps > Apps & features, and in both you can also use Control Panel > Programs and Features.
Select Windows Custom Management, click Uninstall and follow the uninstaller to the end. Then look at the entries just above and below it when the list is sorted by date: bundled programs install at the same minute.
Full procedure with screenshots: Uninstall a program or app in Windows On uGetFix
Step 3: Remove it from startup
Press Ctrl + Shift + Esc to open Task Manager and select Startup apps (Windows 11) or the Startup tab (Windows 10). Disable entries you do not recognise, especially ones with no publisher or with a name that copies a Windows component.
Right-click an entry and choose Open file location to see where it runs from: programs in
%AppData%or%Temp%deserve a closer look. Some entries are not listed there but in the registry Run keys, which the procedure below shows how to check.Full procedure with screenshots: Stop apps from opening at startup On uGetFix
Step 4: Delete the folders left behind
Uninstalling often leaves the program's folders, and some threats reinstall themselves from them.
Press Windows + R, type
%LocalAppData%and press Enter, then do the same for%AppData%and %ProgramData%, and look for folders named after Windows Custom Management, its publisher or created on the day the problem started.Delete those folders, and check
C:\Program FilesandC:\Program Files (x86)too.If Windows says a file is in use, end it in Task Manager or delete the folder after a restart in Safe Mode. The folders are the same in Windows 11 and Windows 10.
Full procedure with screenshots: Remove what malware leaves behind in Windows
Step 5: Scan the PC, then run the offline scan
A scan finds the parts of Windows Custom Management that the manual steps cannot see. In Windows Security > Virus & threat protection > Scan options, start a Full scan and quarantine what it reports.
Follow it with Microsoft Defender Antivirus (offline scan) > Scan now, which restarts the PC and checks the disk while Windows and the malware are not running.
It takes about 15 minutes and works the same in Windows 11 and Windows 10. If either scan finds something, run the full scan again after removal until it comes back clean.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Uninstall from Windows
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.
Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.
Remove from Google Chrome
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.
Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.
Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.
Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.
Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.
Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.
Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.
Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.
Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.
- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.
Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.
Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.
Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.
Stream videos without limitations, no matter where you are
There are multiple parties that could find out almost anything about you by checking your online activity.
While this is highly unlikely, advertisers and tech companies are constantly tracking you online. The first step to privacy should be a secure browser that focuses on tracker reduction to a minimum.
Even if you employ a secure browser, you will not be able to access websites that are restricted due to local government laws or other reasons. In other words, you may not be able to stream Disney+ or US-based Netflix in some countries. To bypass these restrictions, you can employ a powerful VPN, which provides dedicated servers for torrenting and streaming, not slowing you down in the process.
Data backups are important - recover your lost files
Ransomware is one of the biggest threats to personal data.
Once it is executed on a machine, it launches a sophisticated encryption algorithm that locks all your files, although it does not destroy them. The most common misconception is that anti-malware software can return files to their previous states. This is not true, however, and data remains locked after the malicious payload is deleted.
While regular data backups are the only secure method to recover your files after a ransomware attack, tools such as can also be effective and restore at least some of your lost data.
From our report of Apr 2021 · not reviewed since
Eliminate Windows Custom Management for good
Most regular Windows programs can be uninstalled very easily via the Control Panel or Apps and Features section.
However, malware is specially programmed in a way that it would be missing from those sections, hence its removal can become challenging.
Nonetheless, some rogue programs might provide the uninstaller or be visible. Therefore, you should access the Control Panel as explained below and uninstall the unwanted app from there. If that does not work, employ a reputable anti-virus tool and perform a full system scan. Resetting your web browsers is also very important, so follow the steps below carefully.
Questions about Windows Custom Management
What is Windows Custom Management and why is it on my PC?
Windows Custom Management is a program that was installed on the PC, most likely together with something else you downloaded. Free software sites and many installers add extra programs on setup pages with pre-ticked boxes, so the extra install looks like your choice even though nobody read the page.
Check the install date in Settings, Apps, Installed apps: the program you installed that day is the probable carrier. If you do not need Windows Custom Management, uninstall it. If it belongs to your hardware or to a program you use, search its exact name and publisher first, because drivers and their tools can have unfamiliar names.
How do I stop programs like Windows Custom Management from being installed again?
Most unwanted programs arrive through installers, so the fix is in how you install software. Download programs from their official sites or the Microsoft Store, not from download portals or ads above search results. During setup, choose Custom or Advanced installation and untick every extra offer, including browsers, toolbars and optimizers.
Decline update prompts that appear inside other programs unless you know them. In Windows Security, turn on reputation-based protection and potentially unwanted app blocking. These steps would most likely have stopped Windows Custom Management before it reached the app list.
Is my card safe after buying Windows Custom Management?
Treat it as exposed. The order page belongs to the seller of Windows Custom Management, and you cannot know how the number is stored or shared. Ask your bank for a replacement card, which is usually free, and dispute the original charge as a misrepresented product.
Until the new card arrives, check your account daily for small or foreign transactions. If the bank offers alerts for every card payment, turn them on. Keep the receipt and screenshots, because they support the dispute.
Is Windows Security enough to protect me from programs like Windows Custom Management?
For most home users, yes, especially with Potentially unwanted app blocking turned on in Windows Security > App & browser control > Reputation-based protection settings. That setting blocks many scareware installers before they run.
No security tool stops every scam, though, because programs like Windows Custom Management are usually installed by the user after a frightening message. The habit that helps most is simple: ignore any website or pop-up that claims to have scanned your PC, and never call a number shown in a warning.
Is Windows Custom Management an antivirus?
No. It looks like one, with a shield, a scan and a list of threats, but Windows Custom Management is a rogue antivirus: its scans are designed to find something every time, and every fix leads to a payment page.
A real antivirus detects the same threats consistently, removes them without asking for money first and does not block other security tools. Windows 11 and Windows 10 already include Microsoft Defender in Windows Security, which is enough for most home users. Remove Windows Custom Management and keep Defender on.
What could the caller do while connected to my PC?
Anything you could do. Callers working with fake alerts like Windows Custom Management typically show you Windows logs as "proof", install their own remote tool for later, and steer you to online banking or a gift card purchase. Some add a password to Windows or lock the PC if you refuse to pay.
Remove every remote access program you did not install yourself, check Settings > Accounts > Other users for new accounts, and change important passwords from a clean device. If you cannot be sure what was changed, a reset of Windows is the safe choice.
Windows Custom Management will not uninstall. What can I do?
Close it in Task Manager first, then uninstall it from Settings > Apps > Installed apps (in Windows 10, Apps & features). If it blocks this or restarts itself, start Windows in Safe Mode, where third-party programs do not start automatically, and uninstall from there.
Afterwards run a Microsoft Defender offline scan and delete any leftover folder named after Windows Custom Management in C:\Program Files or %AppData%. If nothing works, Windows can be reset while keeping your personal files, which removes the program together with any settings it changed.
Did Windows Custom Management steal my information?
Not by itself, as far as reports show. Programs that display windows Custom Management in the list of installed apps are built to scare people into paying or calling; they rarely take data on their own.
The risk comes from what you did in response: typing card details into the program, or letting a caller connect to your PC. If you did neither, uninstalling the program is enough. If you did either, treat that information as exposed:
- block the card
- change passwords from another device
- remove any remote-access tool that was installed
How do I know Windows Custom Management is fake?
Three things give it away. It appears as windows Custom Management in the list of installed apps, a window from a program rather than from Windows Security. It pushes you to act quickly by calling, paying or downloading.
And the threats it reports never show up when you run a scan in the real Windows Security app. Microsoft does not put phone numbers in warnings or charge for removing threats through pop-ups. Close the window, do not call, and follow the steps to find and uninstall the program behind it.
Will Fortect remove Windows Custom Management?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Windows Custom Management, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- FTC: How to recognize, remove and avoid malware (read October 7, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 7, 2026)
- Microsoft Learn: How Microsoft names malware (read October 7, 2026)