Skip to main content
Microsoft Security Intelligence
Published Jul 29, 2012 | Updated Sep 15, 2017

Antiviral Factory 2013

Detected by Microsoft Defender Antivirus

Aliases: Win32/Winwebsec (Microsoft)


Windows Defender detects and removes this threat.

This rogue pretends to scan for malware and shows you fake warnings about malicious programs and viruses. It is designed to scare you into paying money to remove the fake threats by registering the software.

It can also close or stop programs, processes and services, modify security settings, and block access to websites.

It's a member of the Win32/Winwebsec family.

There is more information about this type of malware on our Rogue security software page.

The following Microsoft products should detect and remove this threat:

However, sometimes this threat can stop you from downloading or running antivirus or antimalware software. If that happens, you will need to use Windows Defender Offline which you can download from here:

You must download Windows Defender Offline from another computer. This threat will block it from downloading and running on your computer.

Windows Defender Offline won't work in safe mode. It runs from a CD, DVD or USB drive - you must make sure your computer is set to 'boot from removable media'.

The following articles may help if you are having trouble getting the tool to work:

Follow us