Win 8 Security System

Win 8 Security System - how to remove it from your computer?

Win 8 Security System is a rogue antivirus software which detects non existent security threats on infiltrated computers and ask to purchase it's licence key in order to remove them. This program doesn't have anything in common with legitimate security programs - it's a scam created by Cyber criminals who are making money from unsuspecting PC user's who falls for the fake security threat detections and fake security warning messages and purchases a licence key for Win 8 Security System. This program doesn't have a virus definition database nor a virus scan engine, all of the processes of a security program are imitated to scare PC users into believing that their computers are infected with critical risk malware and viruses. When Win 8 Security System installs itself on user's PC it will modify the registry of the compromised machine's operating system and will set itself to start automatically on every system start-up.

Every time a you boot your PC you will see a main window of this rogue software performing a fake security check-up which will end up in detection of multiple security infections supposedly detected on your computer. Furthermore this bogus program hijacks your Internet browsers (Internet Explorer and Mozilla FireFox) and displays fake security warning messages when you try to browse the Internet. Win 8 Security System installs on user's computers bundled with a rootkit infection (win32.necurs.gen), in this way this fake antivirus program is able to fix it's registry entries and system files, furthermore it makes it's detection very complicated.

Win 8 Security System is distributed using misleading websites which displays fake online security scan pop-ups and tricks unsuspecting PC users into downloading this rogue. Other known ways of distributing this malicious program include Trojan infections and drive-by downloads. This fake antivirus program originates from a family of fake antivirus software called Braviax. Fake security scanners from this family (Win 7 Antivirus 2012, Win XP Antivirus 2012) has been widely spread all over the Internet at the beginning of this year. Previously seen version of Win 8 Security System was called Windows Ultra Antivirus, having in mind that this variant wasn't spread aggressively it could have been a beta version of Win 8 Security System. If your computer is infected with Win 8 Security System you can use the provided removal guide to help eliminate it from your PC. Don't pay for the licence of this malicious software - you will send your money to Cyber criminals and your PC will still be infected.

Fake security alerts generated by Win 8 Security System:

Tracking software found! Your PC activity is being monitored. Possible spyware infection. Your data security may be compromised. Sensitive data can be stolen. Prevent damage now by completing a security scan.

Virus infection! System security was found to be compromised, Your computer is no infected. Attention, irreversible changes may occur. Private data may be stolen. Click here now for an instant anti-virus scan.

Application has been attacked with the virus! Win 8 Security System detect "Win 8 Security System ALERT - Windows Internet Explorer" corrupted by "Trojan.Android.Geinimi". Click here for immediately security scan.

Win 8 Security System detected "Reported Attack Page! - Mozilla FireFox" corrupted by "Win32.Worm.Stuxnet". Click here for immediately security scan.

Fake security warning messages shown on a computer infected with Win 8 Security System while trying to use Internet browsers:

Internet Explorer alert. Visiting this site may pose a security threat to your system!
Possible reasons include:
Dangerous code found in this site's page which installs unwanted software into your system.
Suspicious and potentially unsafe network activity detected.
Spyware infection in your system.
Complaints from other users about this site.
Port and system scans performed by the site being visited.
Things you can do:
Run a spyware, virus and malware scan (Recommended)
Continue surfing without any security measures (Dangerous)

Deceptive pop-ups shown after a fake Win 8 Security System security scan:

Attention: DANGER!
ALERT! System scan for spyware, adware, trojans and viruses is complete. Win 8 Security System detected 17 critical system objects. These security breaches may be exploited and lead to the following:
Your system becomes a target for spam and bulky, intruding ads
Browser crashes frequently and web access speed decreases
Your personal files, photos, documents and passwords get stolen
Your computer is used for criminal activity behind your back
Bank details and credit card information gets disclosed
Click REGISTER to register your copy of Win 8 Security System and perform threat removal on your system. The list of infections and vulnerabilities detected will become available after registration.

A registered copy of Win 8 Security System offers a full range of features to keep your system clean and protected. Check the list and opportunities here below:
Secure online shopping and banking with our identity protection
Scanning links and web pages to make your web experience safe
Automated updates and improvements
Anti-spam and anti-phishing features
Real time protection and online firewall
Secure social networking, downloads, chats and online services
Become registered user of Win 8 Security System right now and stop worrying about PC security forever!

Win 8 Security System removal

Before starting the removal procedure try entering a retreived registration code for this malicious software. This will make the removal of Win 8 Security System less complicated. In the main windows of this fake antivirus software click Registration (top right corner), then click on "Manual Activation" button and aftering entering this key 8F42D6E3-FD18 click register.

1. Download and install Kaspersky Lab's TDSSKiller.  Win 8 Security System comes bundled with a rootkit infection (win32.necurs.gen), we need to eliminate it first. If you skip this step Win 8 Security System will be able to repair it's removed registy and system files. When you launch your Internet browser click on - Continue surfing without any security measures (Dangerous).

2. Run TDSSKiller and remove all the infections that it will detect (Rootkit.Win32.Necurs.gen).

3. After this procedure don't restart your computer. If you restart your PC Win 8 Security System will once again infect your computer with a rootkit.

4. Download and install recommended antispyware software to completely remove this infection.

remover for Win 8 Security System

Other tools known to remove Win 8 Security System:

• iS3 STOPzilla
• Malwarebytes Anti-Malware

Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.

If you can't access Internet:

Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.

Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.

After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program. Then run a full system scan.

If you are unable to remove Win 8 Security System, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...) If you experience further difficulties try booting your computer using a rescue disk.

End these Win 8 Security System processes:

random.exe

Remove these Win 8 Security System registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<random>
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet\Enum\Root\LEGACY_<random>    
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1 "*" = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1 ":Range" = "127.0.0.1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<random>.exe"

Delete these Win 8 Security System files:

%LocalAppData%\<random numbers and characters>.exe
%System%\drivers\<random numbers and characters>.sys
%UserProfile%\Desktop\Buy Win 8 Security System.lnk
%StartMenu%\Programs\Win 8 Security System\
%StartMenu%\Programs\Win 8 Security System\Buy Win 8 Security System.lnk
%StartMenu%\Programs\Win 8 Security System\Launch Win 8 Security System.lnk