Windows User Satellite

By Domesticus in Rogue Anti-Spyware Program

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 12
First Seen: February 15, 2011
Last Seen: January 8, 2020
OS(es) Affected: Windows

Windows User Satellite Image

Windows User Satellite is a fake security and system optimization program. Apparently, the crooks behind the large family of malware that Windows User Satellite comes from are running out of names, since "Windows User Satellite" is really scraping the bottom of the barrel – but the goal of this malware is still to con people into thinking that Windows User Satellite is actually security software.

Be Aware of Windows User Satellite Symptoms

The signs of Windows User Satellite's presence are obvious, because this infection wants to be noticed. Once Windows User Satellite installs itself, the first thing you'll see is that instead of seeing the desktop when Windows starts, you see the bogus home screen for Windows User Satellite. This interface is bright orange, with lots of spelling and grammatical errors, and stolen Windows logos. When this screen shows up, you will not be able to get to the desktop without letting Windows User Satellite run one of its fake "scans." So, Windows User Satellite will play a little progress animation and then claim that it has found a bunch of viruses or other threats, and it may even include the names of real viruses in its list. Then, Windows User Satellite will warn you that in order to remove all of the threats, you need to pay for a licensed copy of Windows User Satellite software. It will prompt you to go to a website to pay for Windows User Satellite, but paying doesn't get you anything. What you see is what you get.

Once you've made it to the desktop, Windows User Satellite interferes with the normal functioning of the computer to such an extreme degree that you may not be able to use Windows at all in its normal mode. Windows User Satellite will create frequent pop-up alerts that claim that threats have been found that should be removed by Windows User Satellite "full" or "licensed" software. For all of the rogue security programs in the giant family that Windows User Satellite comes from, these alerts are always the same. They will claim that lsass.exe caused problems with startup, that someone is trying to alter the system registry and that Firefox is a keylogger. Windows User Satellite will also prevent you from using other applications, including Task Manager. Windows User Satellite does this by preventing every program other than itself from starting, and then Windows User Satellite will give you a little explanation message that says that the program in question is a virus. Now, if you think you can get help on the Internet and that might be a way out, be warned that Windows User Satellite may redirect your browser to its own sites, too.

The Partnership Between Windows User Satellite and Microsoft Security Essentials Alert Malware

Like all the other malware in its family, Windows User Satellite relies on the fake Microsoft Security Essentials Alert Malware in order to find a way into the system. As the name implies, the Trojan is typically hidden in something that looks harmless, like a download or a social networking link, something that you wouldn't think would be dangerous. Then, the fake MSE Alert Malware will cause alerts to pop-up from the system tray that look as if they come from Microsoft Security Essentials. The first of these alerts will claim that a Trojan has been found on your computer. Subsequent alerts will urge that you download a specific program in order to remove the perceived threat. If you follow the prompts to download this program, that is how you wind up downloading Windows User Satellite. Windows User Satellite then alters the registry to make sure Windows User Satellite runs every time Windows starts, and the next time you reboot, there it is.

Background Information on Windows User Satellite

The whole point of Windows User Satellite is to influence you that you have to pay the money that the malware demands, and so Windows User Satellite engages in scare tactics and ransoming. The whole thing is a scam. In fact, Windows User Satellite is just one small variation on the malware that supports a scam from Russia, and there are many other versions of the same malware under different names. Some of these others are Windows Optimal Settings, Windows Software Guard, Windows Health Center, and Windows Utility Tool, to name just a few. The list grows every day. Windows User Satellite showed up in mid-February 2011. ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

SpyHunter Detects & Remove Windows User Satellite

File System Details

Windows User Satellite may create the following file(s):
# File Name MD5 Detections
1. fufkgd.exe 2f9df364a6caf53a471788a416eaccb8 1

Trending

Most Viewed

Loading...