The “Running the environment check. Please wait… License OK” popup is rarely just a harmless Windows oddity. When it appears in a PowerShell window during startup or keeps coming back after being closed, it usually signals that a hidden script has been set to launch itself again and again.
This pattern commonly shows up after someone runs a cracked installer, a fake game update, a cheat tool, or software from an unreliable mirror. Instead of vanishing after a basic scan, the process may stay alive through scheduled tasks or other startup mechanisms that quietly reload it in the background.
We tested that SpyHunter successfully removes ClipBanker* and we recommend using it. It will block ClipBanker from reinstalling itself and it will make sure your device is clean from any malware.
Try Free For 7 Days*
Buy now15% OFF if you buy straight without trial.
OFFERThat is why the window matters: it can be the visible symptom of a broader compromise. Recent cases have tied this behavior to stolen sign-ins, hijacked Discord sessions, and malware such as ClipBanker and Alumics Service , which watch clipboard activity and can replace copied cryptocurrency wallet details with attacker-controlled ones.
For that reason, this issue should be treated as a security threat first and a startup annoyance second. The full cleanup can be tricky, and readers who do not want to work through a more technical removal guide can use SpyHunter 5 to help remove unwanted programs and viruses.
“Running the environment check. Please wait… License OK” Pop-up Removal Instructions
Start with Windows’ standard uninstall path before you chase files and Registry keys. Removing ClipBanker from Apps & Features is quick and low risk, and it may remove the primary entry if it registered normally. Even when remnants remain, this step reduces what you have to track down during the deeper checks.
Uninstall ClipBanker from Apps & Features
- 1.1If ClipBanker is listed among your installed apps, begin there. Open the Start Menu, go to Settings, and open the section that shows installed applications.
- 1.2Inside Settings, select Apps. Use the search box or filters (name, size, install date) to narrow down entries you do not recognize.
- 1.3Change sorting to Installation date so the newest entries appear first. This makes it easier to spot software added around the time the problems began.
- 1.4Select a questionable entry, click Uninstall, and complete the prompts. Remove any extras the wizard offers, such as add-ons or companion components, so fewer pieces are left behind.
- 1.5After the uninstall finishes, open C:\Users\YourUsername\AppData\Local\Programs. Look for leftover folders or executables connected to what you removed and note anything with odd naming.
- 1.6If a leftover folder clearly belongs to the removed entry, delete it manually. Restart Windows afterward to release file locks and confirm it does not return after the next boot.
After rebooting, confirm the entry is gone and watch for the same symptoms returning. If you still see leftover folders, recurring pop-ups, or repeated high resource use, continue with the deeper checks below to remove hidden components and close common restart triggers.
SUMMARY:
How to Remove “Running the environment check. Please wait… License OK”Popup Completely
If a suspicious process is still active, collect a little context before deleting files at random. With ClipBnaker running, you can identify the file location, the parent process that launched it, and common triggers that keep it coming back. That makes persistence easier to remove and helps you verify every component was addressed.
1. Prepare Windows for a deeper “Running the environment check. Please wait… License OK” cleanup
- 1.1
Enable hidden items so you can find files left by ClipBanker. Search for Folder Options in the Start Menu, open it, go to the View tab, and select Show hidden files, folders, and drives. Hidden paths are common drop zones. - 1.2If Windows refuses deletions because files are “in use”, install LockHunter to remove items it will not release. It adds a right-click option, shows the locking process, and can delete stubborn executables or DLLs after you unlock them.
If you would rather avoid extra utilities, most of the work can still be done by hand. When Windows says a file is “in use,” a lock-release tool mainly saves time by showing what is holding the file and letting you remove it without repeated restarts.
LockHunter is free and usually installs in a couple of minutes. After it is installed, you can launch it from the right-click menu on a file or folder that refuses to delete.
Stop “Running the environment check. Please wait… License OK”Processes in Task Manager
Stopping a single executable is often temporary because helper components can register startup entries, scheduled tasks, or small launchers that bring it back. The steps below help you identify the active file tied to “Running the environment check. Please wait… License OK”, delete the folder it runs from, and then end the task so it cannot immediately relaunch while you continue cleanup.
2. Stop active “Running the environment check. Please wait… License OK” processes and delete their files
- 2.1Start with what is currently running to spot “Running the environment check. Please wait… License OK”components. Press Ctrl + Shift + Esc to open Task Manager, then review active processes and their resource use.
- 2.2If the compact window opens, click More details. The expanded view shows background processes, publishers, and other fields that help separate normal software from outliers.
- 2.3
Sort by CPU or Memory and look for unfamiliar names or steady spikes. Threats often use generic-looking process names so they blend in with normal activity. - 2.4Right-click the entry that looks wrong and select Open file location. The folder path and neighboring files usually make it clearer whether the process belongs to legitimate software.
- 2.5Try to delete the folder that contains the suspicious file. If Windows blocks removal, open LockHunter, choose What’s locking this file?, release the lock, and delete the file and its folder from within the utility.
- 2.6Return to Task Manager and click End task for the same process. Ending it after the file is removed reduces quick respawns and keeps the system stable for the next checks.
We tested that SpyHunter successfully removes ClipBanker* and we recommend using it. It will block ClipBanker from reinstalling itself and it will make sure your device is clean from any malware.
Try Free For 7 Days*
Buy now15% OFF if you buy straight without trial.
Remove Remaining “Running the environment check. Please wait… License OK”Files
Even after you uninstall and stop active processes, a Trojan can remain through small launchers placed in startup locations and helper files scattered across user and program folders. Clearing these leftovers prevents reinfection after sign-in and helps you confirm that “Running the environment check. Please wait… License OK”is not relying on hidden components to rebuild itself.
3. Remove startup and leftover folders linked to “Running the environment check. Please wait… License OK”
- 3.1Start with Startup folders that can relaunch “Running the environment check. Please wait… License OK”: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup and C:\Users\YourUsername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup. Remove unfamiliar shortcuts or executables.
- 3.2In both Startup folders, keep desktop.ini and delete other suspicious entries. If Windows blocks removal, use LockHunter to unlock and delete the item.
- 3.3Next, check C:\Program Files and C:\Program Files (x86). Delete newly created, empty, or oddly named folders that do not match software you intentionally installed.
- 3.4Also review user locations: C:\Users\YourUsername\AppData\Local\, C:\Users\YourUsername\AppData\Local\Programs, and C:\Users\YourUsername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs. These paths often hold launchers, updater stubs, or scripts.
- 3.5
Clear temporary data: open C:\Users\YourUsername\AppData\Local\Temp, press Ctrl + A to select everything, delete the contents, and then empty the Recycle Bin.
Delete Suspicious “Running the environment check. Please wait… License OK”Scheduled Tasks
Scheduled tasks are a common way to restore unwanted components after you delete files, because Windows can run them at logon, on a timer, or when certain triggers occur. Reviewing each task’s actions shows what will execute and from where, which helps stop ClipBanker from returning after a restart.
4. Remove scheduled tasks that relaunch “Running the environment check. Please wait… License OK”
- 4.1
Open Task Scheduler to find triggers that can bring “Running the environment check. Please wait… License OK” back. Search for it in the Start Menu, launch it, and expand the Task Scheduler Library to review tasks in your account and system folders. - 4.2Double-click a task to open Properties, then check Actions to see the exact file that runs and whether it uses parameters.
- 4.3Pay extra attention to tasks that point into user folders like AppData or Roaming, especially when the task name is unfamiliar. These are common hiding places for unwanted payloads.
- 4.4If a task is clearly unwanted, copy the full path shown under Actions, then delete the task from Task Scheduler so it cannot run again.
- 4.5Go to the copied path and delete the referenced executable or script. Removing both the task and its payload prevents relaunches after reboot.
- 4.6Repeat this review across every folder under the Task Scheduler Library, including installer-created subfolders. Persistence is often tucked behind generic names.
Clear Trojan Persistence Entries in the Windows Registry
Even when files are removed, Registry data can remain as startup hooks or references that point to old paths. The aim here is to remove only entries you can confidently connect to unwanted activity, targeting startup values linked to “Running the environment check. Please wait… License OK”while leaving legitimate services and vendor keys intact. Work slowly and delete specific values whenever possible.
5. Remove “Running the environment check. Please wait… License OK” registry leftovers carefully
- 5.1Open Registry Editor to review autostart data that can keep “Running the environment check. Please wait… License OK” active. Press Win + R, type regedit, and press Enter.
- 5.2Press Ctrl + F and search for the exact program name you removed earlier. This often reveals orphaned keys, including services or shell entries.
- 5.3When you find a match, select the key in the left pane and delete it. Continue with F3 until there are no further results across the Registry.
- 5.4Repeat the same search and removal process for any other suspicious programs you identified during earlier steps. Clearing leftover keys reduces the chance that helper components can restore parts of the infection.
- 5.5Run one more search for the exact threat name. Removing a leftover value that points to a missing file can prevent components from being recreated at startup.
- 5.6Check these common autostart and policy locations:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\Setup
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services - 5.7In each location, inspect the right pane for values that point to unknown executables or unusual directories. Delete only the specific value so you do not disrupt legitimate components.
Restart Windows to finish. After the reboot, confirm startup looks normal, check that nothing unexpected relaunches, and verify browsers and installed apps behave as usual. If symptoms continue, an offline scan can help detect hidden components and confirm no scheduled tasks or startup values remain.
