Windows Secure Workshop

By Domesticus in Rogue Anti-Spyware Program

Threat Scorecard

Ranking: 5,881
Threat Level: 10 % (Normal)
Infected Computers: 2,367
First Seen: August 14, 2012
Last Seen: September 16, 2023
OS(es) Affected: Windows

Windows Secure Workshop is not a security application worthy of your trust. Windows Secure Workshop is a bogus anti-spyware program, which was designed by cybercriminals with the only intention to swindle PC users out of their money. In order to benefit from innocent Internet users, Windows Secure Workshop uses tricky methods. Windows Secure Workshop attempts to trick affected PC users into thinking they have serious computer problems.

After successful installation on the compromised PC, Windows Secure Workshop initiates bogus system scans and malware reports. Windows Secure Workshop shows a long list of various malware infections supposedly found on the affected computer system in order to frighten PC users into believing their computers have been affected by several malware threats. Your computer might be corrupted by any of these malware infections, but the most dangerous infection existing on your computer is Windows Secure Workshop itself, which needs to be eliminated with a legitimate anti-malware application. Sadly, Windows Secure Workshop may be difficult to detect and remove by many anti-virus software because it can block legitimate security and Windows programs. Therefore, you need to select a trustworthy and powerful anti-malware tool for full removal of Windows Secure Workshop.

File System Details

Windows Secure Workshop may create the following file(s):
# File Name Detections
1. %AppData%\Inspector-[RANDOM CHARACTERS].exe
2. %AppData%\Protector-[RANDOM 3 CHARACTERS].exe
3. %AppData%\npswf32.dll
4. %CommonPrograms%\Windows Secure Workshop.lnk
5. %DesktopDir%\Windows Secure Workshop.lnk

Registry Details

Windows Secure Workshop may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = mksu7xhdyq
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = u_2012-08-12_1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\[RANDOM CHARACTERS].exe

URLs

Windows Secure Workshop may call the following URLs:

http://search.multisearch.live
https://gfd.opraajf.xyz/

Trending

Most Viewed

Loading...