"Windows Web Security" is a fake online malware scanner webpage that promotes dangerous rogue antivirus software that can severely harm a user's computer and/or put his/her personal information at risk of being stolen.

First, the user will see a message similar to the following:

"Windows Security has found critical process activity on your PC and will perform a fast scan of system files!"

Once the user clicks on the OK box, he/she is then taken to a webpage that resembles the "My Computer" window from Windows XP where a fake scan will take place. During the fake scan, Windows Web Security "detects" supposedly harmful viruses that are non-existent.

After the fake scan is complete, the user will be presented with a window similar to the following:

To help protect your computer, Windows Web Security have detected Trojans and ready to remove them.

Detected spyware and adware on your computer:                      Filename:

(insert any threats here)

Spyware is software, which can gather information from a user's computer through Internet connection. Gather information can be passwords, e-mail addresses and all that data, which is important for you.

If the user clicks on the "Remove all" button (or any part of the webpage for that matter), he/she will unknowingly download an executable file to the user's computer which, if run, will make a dangerous Trojan call in a rogue antivirus program to infect his/her PC with annoying pop-up messages along with considerably slower system performance and perhaps even a system crash.


Community content is available under CC-BY-SA unless otherwise noted.