Threat Database Rogue Anti-Spyware Program Windows Optimal Solution

Windows Optimal Solution

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 4
First Seen: February 11, 2011
Last Seen: January 8, 2020
OS(es) Affected: Windows

Windows Optimal Solution is nothing more than a new name for an old scam. This one has been going around for a little while, and its behavior is entirely typical for a rogue security application.

Windows Optimal Solution Infection and Evidence

The symptoms associated with Windows Optimal Solution begin with the fake Microsoft Security Essentials Malware. You will not notice this Trojan downloading to the system, because it will be hidden in some other download, but once it is present it can't be ignored. The Fake Microsoft Security Essentials Trojan causes alerts to pop-up from the system tray, which look just like real MSE alerts. These alerts will allege that a threat has been found on the computer and that an effective anti-malware program has been found that can protect the computer from the supposed threat. If you follow the prompt to download the software that this fake alert recommends, you will mistakenly download Windows Optimal Solution.

The problems with Windows Optimal Solution itself begin the next time you start the computer, because the fake security software will alter the registry so that Windows Optimal Solution runs every time Windows starts. Instead of seeing the desktop, you will see the bogus user interface for Windows Optimal Solution. This interface uses the Windows name and logo without consent, and it includes a link to Microsoft's actual Safety & Security Center website in the bottom left corner. All of this is meant to confer some kind of believability upon Windows Optimal Solution, which has no connection to Microsoft.

You will see this interface frequently, since Windows Optimal Solution runs all its fake scans from this bogus home screen. Windows Optimal Solution plays a little animation of a progress bar, and then tells you it has run a scan and found a variety of threats. While some threats listed don't really exist, others are the names of real viruses. These real virus names are presumably included in the list with the intent to scare you more effectively when Windows Optimal Solution tells you that the only way to remove the things it "found" is to purchase a license for Windows Optimal Solution software. Remember, the list of results is fake; none of the viruses listed in it is actually on your computer. It's a scare tactic.

After you finally make it to the desktop, Windows Optimal Solution will generate frequent pop-up alerts that claim that your system is at risk, or that a threat has been detected. These alerts will prompt you to pay for a license, too, in order to remove or deal with the threats that Windows Optimal Solution claims to have found. Typically, like all the other rogue anti-virus programs in its family, Windows Optimal Solution will warn you about lsass.exe, Firefox, and the system registry. These alerts are the same on every computer infected with Windows Optimal Solution, and the same for every piece of malware that is essentially identical to it.

As if all of that weren't enough, Windows Optimal Solution will frequently prevent other programs from running, and will tell you it's because these programs are "infected." This is just Windows Optimal Solution looking out for itself, by making sure you can't access anything that might be able to remove malware and would recognize Windows Optimal Solution as the fake security program that it is.

Of course, no scam would be complete without stealing money, so the phony website that Windows Optimal Solution will direct you to, which claims to be for a real company selling real anti-virus software, really will take your credit card information and your money. Once you've paid up, Windows Optimal Solution doesn't behave any differently, and it doesn't gain any functionality, because there never was any to be had in the first place.

Additional Information About WindowsOptimal Solution

The other mutations of this same rogue anti-virus application are Windows Software Protection, Windows Software Guard, Windows Health Center, Windows Safety Protection, and many other variants with similar names. Like all of these scams, Windows Optimal Solution originated in Russia. The only difference is, Windows Optimal Solution is a name that began being used mid-February 2011.

SpyHunter Detects & Remove Windows Optimal Solution

File System Details

Windows Optimal Solution may create the following file(s):
# File Name MD5 Detections
1. xgflqg.exe 8edf2f1fd138d93ec869fba70705f34d 1


Most Viewed