You have been re-routed to the Rogue:Win32/Winwebsec write up because Rogue%3aWin32%2fWinwebsec has been renamed to Rogue:Win32/Winwebsec


Microsoft security software detects and removes this threat. See the Win32/Winwebsec description for more information.

Find out ways that malware can get on your PC.  

What to do now

Use the following free Microsoft software to detect and remove this threat:

You should also run a full scan. A full scan might find other, hidden malware.

Remove programs

You might need to manually remove this program:

Removing "MS Removal Tool"

There are instructions on how to remove the "MS Removal Tool" variant of this malware in the following article:

Advanced troubleshooting

To restore your PC, you might need to download and run Windows Defender Offline. See our advanced troubleshooting page for more help.

Get more help

You can also ask for help from other PC users at the Microsoft virus and malware community.

If you’re using Windows XP, see our Windows XP end of support page.

Threat behavior

Microsoft security software detects and removes this threat. See the Win32/Winwebsec description for more information.


Refer to each of the different brands  in the Win32/Winwebsec description for more information.


Alert level: Severe
First detected by definition: 1.55.1987.0
Latest detected by definition: 1.199.1492.0 and higher
First detected on: Apr 20, 2009
This entry was first published on: Aug 17, 2010
This entry was updated on: Aug 25, 2014

This threat is also detected as:
  • System Progressive Protection (other)
  • Adware/AntiSpywarePro2009 (Panda)
  • Adware/UltimateCleaner (Panda)
  • Adware/Xpantivirus2008 (Panda)
  • AntiSpyware Pro 2009 (other)
  • AntiVirus2008 (Symantec)
  • FakeAlert-AntiSpywarePro (McAfee)
  • FakeAlert-WinwebSecurity.gen (McAfee)
  • Live Security Platinum (other)
  • Mal/FakeAV-AK (Sophos)
  • MS Removal Tool (other)
  • Security Tool (other)
  • SecurityRisk.Downldr (Symantec)
  • System Security (other)
  • Security Shield (other)
  • SecurityShieldFraud (Symantec)
  • SystemSecurity2009 (other)
  • Total Security (other)
  • Troj/FakeVir-LB (Sophos)
  • Trojan:Win32/Winwebsec (other)
  • TrojanDropper:Win32/Winwebsec (other)
  • W32/AntiVirus2008.AYO (Norman)
  • Win32/Adware.SystemSecurity (ESET)
  • Win32/Adware.WinWebSecurity (ESET)
  • Winweb Security (other)
  • Essential Cleaner (other)
  • Personal Shield Pro (other)
  • Security Shield 2012 (other)
  • Security Sphere 2012 (other)
  • Smart Protection 2012 (other)
  • Security Shield 2012 (other)
  • Smart Fortress 2012 (other)
  • Win 8 Security System (other)
  • Advanced PC Shield 2012 (other)
  • Disk Antivirus Professional (other)
  • AVASoft Professional Antivirus (other)
  • System Doctor 2014 (other)
  • Attentive Antivirus (other)
  • Antiviral Factory 2013 (other)
  • Antivirus Security Pro (other)
  • Smart Guard Protection (other)