We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Rogue:JS/Winwebsec
Aliases: System Progressive Protection (other) Adware/AntiSpywarePro2009 (Panda) Adware/UltimateCleaner (Panda) Adware/Xpantivirus2008 (Panda) AntiSpyware Pro 2009 (other) AntiVirus2008 (Symantec) FakeAlert-AntiSpywarePro (McAfee) FakeAlert-WinwebSecurity.gen (McAfee) Live Security Platinum (other) Mal/FakeAV-AK (Sophos) MS Removal Tool (other) Security Tool (other) SecurityRisk.Downldr (Symantec) System Security (other) Security Shield (other) SecurityShieldFraud (Symantec) SystemSecurity2009 (other) Total Security (other) Troj/FakeVir-LB (Sophos) Trojan:Win32/Winwebsec (other) TrojanDropper:Win32/Winwebsec (other) W32/AntiVirus2008.AYO (Norman) Win32/Adware.SystemSecurity (ESET) Win32/Adware.WinWebSecurity (ESET) Winweb Security (other) Essential Cleaner (other) Personal Shield Pro (other) Security Shield 2012 (other) Security Sphere 2012 (other) Smart Protection 2012 (other) Security Shield 2012 (other) Smart Fortress 2012 (other) Win 8 Security System (other) Advanced PC Shield 2012 (other) Disk Antivirus Professional (other) AVASoft Professional Antivirus (other) System Doctor 2014 (other) Attentive Antivirus (other) Antiviral Factory 2013 (other) Antivirus Security Pro (other) Smart Guard Protection (other)
Summary
Windows Defender Antivirus detects and removes this threat. See the Win32/Winwebsec description for more information.
The following free Microsoft software detects and removes this threat:
- Microsoft Defender Antivirus for Windows 10 and Windows 8.1, or Microsoft Security Essentials for Windows 7 and Windows Vista
- Microsoft Safety Scanner
- Microsoft Windows Malicious Software Removal Tool
Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.
Get more help
You can also see our advanced troubleshooting page for more help.
If you’re using Windows XP, see our Windows XP end of support page.
Removing "MS Removal Tool"
There are instructions on how to remove the "MS Removal Tool" variant of this malware in the following article:
However, in some cases you may need to use the free tool Windows Defender Offline to fully clean your PC:
The following articles may help if you're having trouble getting the tool to work:
- Windows Defender Offline: frequently asked questions
- Microsoft's Free Security Tools - Windows Defender Offline
After you've used Windows Defender Offline, you should make sure your security software is up to date and run a full scan:
Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.
You can also visit the Microsoft virus and malware community for more help.