Windows Profile System

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 3
First Seen: May 25, 2011
Last Seen: January 8, 2020
OS(es) Affected: Windows

Windows Profile System Image

Windows Profile System is not a Windows security application. Windows Profile System is a rogue anti-spyware program. Malicious software like Windows Profile System is designed to attack a computer system and then attempt to coax the computer user into giving up his/her credit card information. Don't give Windows Profile System your money; instead, remove Windows Profile System with a genuine anti-spyware utility immediately.
 

Windows Profile System and the Fake Microsoft Security Essentials Alert Trojan

The most common way in which Windows Profile System enters a computer system is through the Fake Microsoft Security Essentials Alert Trojan. Windows Profile System has dozens of clones which use this same pathway to infect computer systems. There are other ways to become infected with Windows Profile System such as the Zlob Trojan and downloading Windows Profile System directly. However, the Fake Microsoft Security Essentials Alert Trojan remains the most common.
The Fake Microsoft Security Essentials Alert Trojan gets its name because it displays a fake alert from Microsoft Security Essentials. This alert will claim that there is a security problem with the computer system and that it is necessary to download and install additional security software. If the computer user clicks on Install, the Trojan will proceed to download Windows Profile System or one of its many clones.
 

How Windows Profile System Runs Amok on a Computer System

Once Windows Profile System is downloaded and installed, Windows Profile System will attack the computer system from all fronts. It does this for two reasons: to protect itself and to scare the computer user into buying a Windows Profile System license. Some actions Windows Profile System takes to frighten computer users include:

- A fake system scan that returns numerous infections and security problems.
- Constant pop-up notifications and phony security alerts.
- Error messages and system crashes when opening executable files or attempting to access the Internet.
This last step is also taken by Windows Profile System to protect itself. By doing that, Windows Profile System makes it harder for the computer user to download a solution or run a genuine security application to remove Windows Profile System from his/her computer.
 

Dealing With the Pest Invading Your Computer

Windows Profiles System is a dangerous computer security problem. If Windows Profile System is not dealt with quickly, the consequences to your computer can be devastating. Thankfully, most properly updated anti-malware solutions can permanently remove Windows Profile System and its clones.

SpyHunter Detects & Remove Windows Profile System

File System Details

Windows Profile System may create the following file(s):
# File Name MD5 Detections
1. psgsks.exe be7cd5663ec848f75215b79d0f1f74c9 1
2. %UserProfile%\Application Data\Microsoft\.exe

Registry Details

Windows Profile System may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore "DisableSR " = '1'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = '0'

Trending

Most Viewed

Loading...