Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
6 entries found.
Updated on Dec 19, 2010
Security Shield is a variant of Win32/Winwebsec -- a family of programs that claims to scan for malware and displays fake warnings of “malicious programs and viruses”. They then inform the user that they need to pay money to register the software in order to remove these non-existent threats.
 
In mid to late January this variant of Win32/Winwebsec was observed being distributed via Twitter. A number of tweets were sent to users that contained a malicious link that directed them (via a redirector) to download a copy of the Security Shield variant of Rogue:Win32/Winwebsec.  
 
Special Note:
Rogue Antivirus programs are programs that generate misleading alerts and false detections in order to convince users to purchase illegitimate security software.  Some of these programs may display product names or logos in an apparently unlawful attempt to impersonate Microsoft products. 
 
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products will detect and remove this threat:
 
 
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
Alert level: low
Updated on Aug 17, 2010

Windows Defender Antivirus detects and removes this threat. See the Win32/InternetAntivirus description for more information.

Alert level: severe
Updated on Aug 17, 2010

Windows Defender Antivirus detects and removes this threat. See the Win32/Defmid description for more information.

Alert level: severe
Updated on Aug 17, 2010

Windows Defender Antivirus detects and removes this threat. See the Win32/Winwebsec description for more information.

Find out ways that malware can get on your PC.  

Alert level: severe
Updated on Aug 17, 2010

Windows Defender Antivirus detects and removes this threat. See the Win32/Winwebsec description for more information.

Alert level: severe
Updated on Aug 17, 2010

Microsoft security software detects and removes this family of threats.

This family of rogue security programs pretend to scan your PC for malware, and often report lots of infections. The program will say you have to pay for it before it can fully clean your PC.

However, the program hasn't really detected any malware at all and isn't really an antivirus or antimalware scanner. It just looks like one so you'll send money to the people who made the program. Some of these programs use product names or logos that unlawfully impersonate Microsoft products.

Even if you do pay to "unlock" the app, it won't do anything because your PC isn't actually infected with all that malware it "found".

Different brands of the rogues may modify various settings on your computer, end or close programs or system services, or block access to websites.

by other malware.

You can read more on our rogue page.

Find out ways that malware can get on your PC.

Alert level: severe