The FakeVimes family of rogues has been enlarging rapidly. Windows Warding System is one of its newest members. Just like its predecessors, Windows Warding System uses a number of tricks in order to make you believe your computer has some serious security issues that need to be solved immediately. Then, the malicious program tries to mislead you into buying its paid version.
Figure 1. Windows Warding System screenshot
Other representatives of this rogue family are Windows Trouble Taker and Windows Basic Antivirus. They resemble each other not only in manner of operation, but also in appearance. Windows Warding System is delivered to targeted computers in two main ways: via fake online scanners or via Trojans. Please note that even seemingly legitimate websites may be corrupted. Therefore, you should be very careful with online scanners, especially if they claim that your PC is full of viruses and them prompt you to download a program. It is always a good idea to check whether the advertised by the scanner program is legitimate or not before downloading it.
In contrast to the fake online scanners, Trojans that distribute the Windows Warding System infection do not ask you if you would like to download the program. When you click through the website, the Trojans try to find vulnerabilities in you computer system, and if they find any, they use them as an entrance towards your PC. Then, without seeking your permission, they download Windows Warding System on your machine and help in its installation.
Windows Warding System configures itself to start automatically when you turn your PC on. When launched, the fake software pretends to be scanning the system for viruses and presumably detects a number of infections. If you decide to remove them, it prompts you to buy its full version. In reality, despite the fact that it is advertised by the scans as an efficient virus- fighter, even the so-called full version of Windows Warding System is incapable of coping with viruses, because it is a virus itself.
The annoying scans, which are frequently performed, would not be your only problem in case you have been infected with Windows Warding System. The malicious program will also bombard you with a whole bunch of fake alerts that claim your PC has been infected. Some of them are:
Warning
Firewall has blocked a program from accessing the Internet
C:\program files\internet explorer\iexplore.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Error
Attempt to modify registry key entries detected. Registry entry analysis is recommended.
In addition to the irritating pop-ups, which also slow down your computer’s performance palpably, some of your programs will be blocked. When you try to run a given application, Windows Warding System will terminate it under the bogus excuse that the application has been infected.
To make things even worse, the malware may even hijack your Registry editor and Windows Task Manager. When you try to launch them, the rogue starts its own Advanced Process Control. Though it seems to have the functions of a task manager, it is under the control of Windows Warding System.
To put it in a nutshell, Windows Warding System will do anything to convince you to purchase its paid version. Instead of letting it blackmail you, though, use a genuine anti-virus tool and remove the impostor ASAP.
*SpyHunter’s free scanner is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter’s malware suite to remove the malware threats.
