is a family of programs that claims to scan for malware and displays fake warnings of “malicious programs and viruses”. They then tell you that you need to pay money to register the software in order to remove these non-existent threats.
This trojan might display a dialog that mimics the Windows Security Center. Some members of the Win32/Winwebsec family might also download additional malware and have been observed in the wild downloading variants of Worm:Win32/Swimnag, and Worm:Win32/Koobface.
has been distributed with many different names. The user interface and other details vary to reflect each variant's individual branding. These different distributions of the trojan use various installation methods, with file names and system modifications that can differ from one variant to the next.
Current Winwebsec variants seen in the wild (as of October 2013):
brands might use icons or user interfaces similar to the following:
Please refer to the individual encyclopedia entries listed above for the symptoms of the different variants of Winwebsec.