Skip to main content
Published Aug 17, 2010 | Updated Sep 15, 2017


Detected by Microsoft Defender Antivirus

Aliases: System Progressive Protection (other) Adware/AntiSpywarePro2009 (Panda) Adware/UltimateCleaner (Panda) Adware/Xpantivirus2008 (Panda) AntiSpyware Pro 2009 (other) AntiVirus2008 (Symantec) FakeAlert-AntiSpywarePro (McAfee) FakeAlert-WinwebSecurity.gen (McAfee) Live Security Platinum (other) Mal/FakeAV-AK (Sophos) MS Removal Tool (other) Security Tool (other) SecurityRisk.Downldr (Symantec) System Security (other) Security Shield (other) SecurityShieldFraud (Symantec) SystemSecurity2009 (other) Total Security (other) Troj/FakeVir-LB (Sophos) Trojan:Win32/Winwebsec (other) TrojanDropper:Win32/Winwebsec (other) W32/AntiVirus2008.AYO (Norman) Win32/Adware.SystemSecurity (ESET) Win32/Adware.WinWebSecurity (ESET) Winweb Security (other) Essential Cleaner (other) Personal Shield Pro (other) Security Shield 2012 (other) Security Sphere 2012 (other) Smart Protection 2012 (other) Security Shield 2012 (other) Smart Fortress 2012 (other) Win 8 Security System (other) Advanced PC Shield 2012 (other) Disk Antivirus Professional (other) AVASoft Professional Antivirus (other) System Doctor 2014 (other) Attentive Antivirus (other) Antiviral Factory 2013 (other) Antivirus Security Pro (other) Smart Guard Protection (other)


Microsoft security software detects and removes this family of threats.

This family of rogue security programs pretend to scan your PC for malware, and often report lots of infections. The program will say you have to pay for it before it can fully clean your PC.

However, the program hasn't really detected any malware at all and isn't really an antivirus or antimalware scanner. It just looks like one so you'll send money to the people who made the program. Some of these programs use product names or logos that unlawfully impersonate Microsoft products.

Even if you do pay to "unlock" the app, it won't do anything because your PC isn't actually infected with all that malware it "found".

Different brands of the rogues may modify various settings on your computer, end or close programs or system services, or block access to websites.

by other malware.

You can read more on our rogue page.

Find out ways that malware can get on your PC.

The following free Microsoft software detects and removes this threat:

Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.

Remove programs

You might need to manually remove this program:

Removing "MS Removal Tool"

There are instructions on how to remove the "MS Removal Tool" variant of this malware in the following article:

Advanced troubleshooting

To restore your PC, you might need to download and run Windows Defender Offline. See our advanced troubleshooting page for more help.

Get more help

You can also ask for help from other PC users at the Microsoft virus and malware community.

If you’re using Windows XP, see our Windows XP end of support page.

Follow us