Windows Security System Rogue Removal Instructions

[Arief Prabowo 103]

The Emsisoft malware research team has discovered a new outbreak of the Windows Security System. Emsisoft Anti-Malware detects this malware as Rogue.Win32.WindowsSecuritySystem

Windows Security System is a rogue scanner application. A rogue application tries to trick you by displaying false positive or misleading scan results report, which says that your computer has a problem, or infected with viruses or trojan, but you will not be able to fix it before you purchase.

Create new files:

%ProgramFiles%\wss\
%ProgramFiles%\wss\Windows Security System.exe
%AppData%\Microsoft\Internet Explorer\Quick Launch\Windows Security System.lnk
%UserProfile%\Desktop\Windows Security System.lnk
%UserProfile%\Start Menu\Windows Security System\
%UserProfile%\Start Menu\Windows Security System\Windows Security System.lnk

Create new registry entry:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Windows Security System
%ProgramFiles%\wss\Windows Security System.exe
HKEY_CURRENT_USER\Software\[random]

Screenshots:

How to remove the infection of Windows Security System (Rogue.Win32.WindowsSecuritySystem)?

To delete this malware infection, please download and install Emsisoft Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine.