Windows User Satellite
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Ranking: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
Threat Level: | 100 % (High) |
Infected Computers: | 12 |
First Seen: | February 15, 2011 |
Last Seen: | January 8, 2020 |
OS(es) Affected: | Windows |
Windows User Satellite is a fake security and system optimization program. Apparently, the crooks behind the large family of malware that Windows User Satellite comes from are running out of names, since "Windows User Satellite" is really scraping the bottom of the barrel – but the goal of this malware is still to con people into thinking that Windows User Satellite is actually security software.
Table of Contents
Be Aware of Windows User Satellite Symptoms
The signs of Windows User Satellite's presence are obvious, because this infection wants to be noticed. Once Windows User Satellite installs itself, the first thing you'll see is that instead of seeing the desktop when Windows starts, you see the bogus home screen for Windows User Satellite. This interface is bright orange, with lots of spelling and grammatical errors, and stolen Windows logos. When this screen shows up, you will not be able to get to the desktop without letting Windows User Satellite run one of its fake "scans." So, Windows User Satellite will play a little progress animation and then claim that it has found a bunch of viruses or other threats, and it may even include the names of real viruses in its list. Then, Windows User Satellite will warn you that in order to remove all of the threats, you need to pay for a licensed copy of Windows User Satellite software. It will prompt you to go to a website to pay for Windows User Satellite, but paying doesn't get you anything. What you see is what you get.
Once you've made it to the desktop, Windows User Satellite interferes with the normal functioning of the computer to such an extreme degree that you may not be able to use Windows at all in its normal mode. Windows User Satellite will create frequent pop-up alerts that claim that threats have been found that should be removed by Windows User Satellite "full" or "licensed" software. For all of the rogue security programs in the giant family that Windows User Satellite comes from, these alerts are always the same. They will claim that lsass.exe caused problems with startup, that someone is trying to alter the system registry and that Firefox is a keylogger. Windows User Satellite will also prevent you from using other applications, including Task Manager. Windows User Satellite does this by preventing every program other than itself from starting, and then Windows User Satellite will give you a little explanation message that says that the program in question is a virus. Now, if you think you can get help on the Internet and that might be a way out, be warned that Windows User Satellite may redirect your browser to its own sites, too.
The Partnership Between Windows User Satellite and Microsoft Security Essentials Alert Malware
Like all the other malware in its family, Windows User Satellite relies on the fake Microsoft Security Essentials Alert Malware in order to find a way into the system. As the name implies, the Trojan is typically hidden in something that looks harmless, like a download or a social networking link, something that you wouldn't think would be dangerous. Then, the fake MSE Alert Malware will cause alerts to pop-up from the system tray that look as if they come from Microsoft Security Essentials. The first of these alerts will claim that a Trojan has been found on your computer. Subsequent alerts will urge that you download a specific program in order to remove the perceived threat. If you follow the prompts to download this program, that is how you wind up downloading Windows User Satellite. Windows User Satellite then alters the registry to make sure Windows User Satellite runs every time Windows starts, and the next time you reboot, there it is.
Background Information on Windows User Satellite
The whole point of Windows User Satellite is to influence you that you have to pay the money that the malware demands, and so Windows User Satellite engages in scare tactics and ransoming. The whole thing is a scam. In fact, Windows User Satellite is just one small variation on the malware that supports a scam from Russia, and there are many other versions of the same malware under different names. Some of these others are Windows Optimal Settings, Windows Software Guard, Windows Health Center, and Windows Utility Tool, to name just a few. The list grows every day. Windows User Satellite showed up in mid-February 2011.
SpyHunter Detects & Remove Windows User Satellite
File System Details
# | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
---|---|---|---|
1. | fufkgd.exe | 2f9df364a6caf53a471788a416eaccb8 | 1 |
Submit Comment
Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.