Windows Prime Shield
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Ranking: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 100 % (High) |
| Infected Computers: | 6 |
| First Seen: | January 14, 2014 |
| Last Seen: | May 5, 2019 |
| OS(es) Affected: | Windows |
Windows Prime Shield is one of the many rogue security programs in the FakeVimes family. FakeVimes rogue security programs tend to be among the most common forms of active rogue security software. Programs like Windows Prime Shield have the external appearance of legitimate anti-virus programs but do not have the capacity to detect or remove threats. In fact, programs like Windows Prime Shield are considered a form of threats themselves and should be removed immediately.
Table of Contents
Windows Prime Shield Uses Old Tactics to Entice Novice PC Users
Windows Prime Shield may enter a computer using typical threats delivery methods. For example, Windows Prime Shield may be installed by a Trojan infection, through social engineering methods or using attack websites containing threatening exploit kits. The main purpose of Windows Prime Shield is to show as much evidence as Windows Prime Shield can 'prove' that the target computer is severely infected with various threats. Windows Prime Shield pretends to be a 'trial version' of a legitimate anti-virus program. Windows Prime Shield displays fake virus scans and irritating pop-up error messages claiming that the victim's computer is severely infected. Whenever the computer users try to use Windows Prime Shield to fix these supposed problems, additional error messages will appear, claiming that it is necessary to pay for a 'full version' of Windows Prime Shield, usually by using Ukash or other online payment services.
Members of the FakeVimes family use the same tactic to try to induce PC user to purchase its useless product. Among its clones are Virus Melt, Presto TuneUp, Fast Antivirus 2009, Extra Antivirus, Windows Security Suite, Smart Virus Eliminator, Packed.Generic.245, Volcano Security Suite, Windows Enterprise Suite, Enterprise Suite, Additional Guard, PC Live Guard, Live PC Care, Live Enterprise Suite, Security Antivirus, My Security Wall, CleanUp Antivirus, Smart Security, Windows Protection Suite, Windows Work Catalyst.
Which Trouble Windows Prime Shield Can Bring to the PC It Invades?
There are numerous problems associated with Windows Prime Shield, including the following:
- Windows Prime Shield makes harmful changes to your computer's settings that make it more vulnerable to threats and cause various performance issues.
- Windows Prime Shield prevents you from accessing your software or files, displaying bogus error messages whenever you try to do so.
- Windows Prime Shield displays numerous irritating pop-up windows and fraudulent system alerts so you will be convinced that your computer is infected with threats.
- Windows Prime Shield may interfere with your Web browser, causing redirects to websites linked to the Windows Prime Shield or completely preventing you from opening your Web browser at all.
- Windows Prime Shield will interfere with legitimate security software as a way of protecting itself from removal.
File System Details
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %AppData%\svc-[RANDOM CHARACTERS].exe | |
| 2. | %UserProfile%\Desktop\Windows Prime Shield.lnk | |
| 3. | %AllUsersProfile%\Start Menu\Programs\Windows Prime Shield.lnk | |
| 4. | %AppData%\result1.db |
Registry Details
Messages
The following messages associated with Windows Prime Shield were found:
|
Error
There's a suspicious software running on your PC. For more details, run a system file check. |
|
Error
Trojan activity detected. System data security is at risk. It is recommended to activate protection and run a fully system scan. |
|
Firewall has blocked a program from accessing the Internet
Windows NT Logon Application C:\Windows\system32\winlogon.exe is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server. |
