security software detects and removes this family of threats.
The Winwebsec family is a group of programs that claim to scan your PC for malware and show you fake warnings of "malicious programs and viruses".
The programs ask you to pay to "register" the software and remove the non-existent threats.
Some of these programs try to impersonate Microsoft by using our name or logos.
They can also stop your security software from running, change security settings, and stop you from going to certain websites.
The programs can be installed on your PC alongside other malware, including variants of the Trojan:Win32/Necurs family.
You can read more on our rogue page.
The following Microsoft software detects and removes this threat:
There are instructions on how to remove the "MS Removal Tool" variant of this malware in the following article:
Some Winwebsec variants can stop your security software from running by closing or ending programs, processes and services. In these cases, you may need to use the free tool Windows Defender Offline to fully clean your PC:
The following articles may help if you're having trouble getting the tool to work:
After you've used Windows Defender Offline, you should make sure your security software is up to date and run a full scan:
Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.
You can also visit the Microsoft virus and malware community for more help.