Windows Security System Description

[+] Click Image to Enlarge

• 
• 
• 
• 
• 
• 
• 
• 

Windows Security System is a name that is used by a couple of fake security programs. Windows Security System can belong to a rogue security application in the WinWebSec family of malware, with variants with names such as Windows Security System 2010 and Windows System Security 2011. However, the most common malware infection associated with Windows Security System is one of the many variants of the FakeVimes family of malware released in 2012. Windows Security System is designed to make its victims believe that their machine is infected with numerous Trojans and viruses. Then, Windows Security System will try to convince its victims to pay for a useless upgrade for this fake security program. Since Windows Security System and all of its variants have no actual anti-malware capabilities, they should all be removed with the use of an adequate anti-malware program with an anti-rootkit component. Examples of the dozens of FakeVimes variants released in 2012 include programs such as Windows Virtual Firewall, Windows Home Patron and Windows Web Combat.

How Windows Security System Infects a Computer

Windows Security System is associated with a Trojan that will often be bundled with a variant of the Sirefef family of rootkits. Because of this, Windows Security System cannot spread from one computer to another by itself. Usually, Windows Security System requires either a secondary malware infection or the help of the victims themselves in order to attack a computer system. Windows Security System and other malware in the FakeVimes family will typically spread due to social engineering attacks. These kinds of attacks take advantage of human nature and gullibility in order to deceit PC users into downloading and installing malware themselves. Some examples of social engineering approaches used to distribute Windows Security System include disguising Windows Security System or its Trojan dropper as innocuous email attachments or delivering Windows Security System via fake online malware scans.

Dealing with a Windows Security System Infection

Since Windows Security System will often be associated with components in the Sirefef family of rootkits, an advanced anti-rootkit tool may be necessary to remove this threat completely. ESG security analysts strongly advise against purchasing Windows Security System, even if it is only done in order to stop many of the annoying symptoms associated with a Windows Security System infection. Instead, you can ‘register’ this fake security program with the code 0W000-000B0-00T00-E0020. Although this won’t remove Windows Security System, it can help put a temporary halt on many of its most irritating features.

Type: Rogue AntiSpyware Programs

How Can You Detect Windows Security System?

‘How Windows Security System Infects Your Computer’ Video

Windows Security System Removal Details

Windows Security System creates the following files in the system:

• %desktopdir%\windows security system.lnk
• %programs%\windows security system\windows security system.lnk
• %appdata%\microsoft\internet explorer\quick launch\windows security system.lnk
• %programs%\windows security system\activate windows security system.lnk
• %programs%\windows security system\how to activate windows security system.lnk
• %appdata%\windows security system.lnk
• %programs%\windows security system.lnk
• %programs%\windows security system\help windows security system.lnk

Important Article Disclaimer