Click on screenshot to zoom
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Shows commercial adverts
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

Windows Servant System

With all the time and effort invested into rogue optimization and defragmenter tools it has become a lot more difficult for even experienced PC users to discern between genuine and fake applications such as this Windows Servant System. It would seem that this rogue in particular emanates from a long line of harmful and heavily despised rogues, such as Windows Problems Solution, Windows Optimal Settings, Windows Problems Protector and Windows System Optimizator to name but only a few. Indeed, this rogue defragger will cause your system a lot more damage than it will good, and will never live up to any of its over embellished promises.

Windows Servant System enters the system surreptitiously through the use of seditious Trojans. These Trojans penetrate the PC’s defenses with the help of dangerous and annoying browser hijacking web domains, bogus online malware scanners and bundled security downloads.

Download Spyware Removal Tool to Remove* Windows Servant System
  • Quick & tested solution for Windows Servant System removal.
  • 100% Free Scan for Windows

The user will remain largely unaware of Windows Servant System’s presence on the system. Once its infection is securely rooted in the system, Windows Servant System will reveal its presence to the user by starting its attack on the system. This will happen by spamming the user with plenty of falsely generated security alerts. The motivation behind this is to panic the user into paying for its worthless software, as well as to place Windows Servant System in an authoritative light. Do not pay any attention to any of the fake alerts, as they are all without base and completely fake. Some of the fake alerts generated by Windows Servant System include the following:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click \'show details\' to learn more.”

System component corrupted!
System reboot error has occurred due to lsass.exe system process failure.
This may be caused by severe malware infections.
Automatic restore of lsass.exe backup copy completed.
The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.

Windows Safety Protection will then prompt the PC owner to scan his system. This will start a fake scan of the PC which ultimately states that a particular file is infected with Trojan.Horse.Win32.PAV.64.a. Windows Safety Protection then prompts the user to install Windows Safety Protection to remove the virus. The text of this prompt is:

Threat prevention solution found
Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.
Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a seriuos possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press \'OK\' to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.

Name: firefox.exe
Name: c:\\program files\\firefox\\firefox.exe
Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.

Users who could not get rid of Windows Servant Scan in time complained about being unable to access their Desktops. Despite this being a very annoying symptom, it also prevents you from being able to remove Windows Servant Scan. Follow these instructions to regain access to your Desktop again:

1. Reboot your system. You will find the Windows Servant System startup screen blocking access to your Desktop. Click the “OK” button to make it go away. The malware will start a fake system scan.
2. Wait until the scan is done. Once the scan is finished you will see another fake security notice. Click “OK” one more time.
3. Make the notification go away by clicking on the red “X” at the right top of it.
4. It should now disappear and you will be able to access your desktop again.

At the end of the day the only way you will be able to completely regain control of your PC will be to altogether erase Windows Servant System from the system. This can best be achieved through making use of a genuine security tool which will not only obliterate Windows Servant System but also protect your PC against any similar attacks.

Download Spyware Removal Tool to Remove* Windows Servant System
  • Quick & tested solution for Windows Servant System removal.
  • 100% Free Scan for Windows

How to manually remove Windows Servant System

Files associated with Windows Servant System infection:


Windows Servant System processes to kill:


Remove Windows Servant System registry entries:

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell “%AppData%\[random].exe”


  1. Anthony Jasso Mar 10, 2011

    oh my goodness, THANK YOU SO MUCH! i have recently bought my new laptop because of a similar virus and was totally horrified when these windows kept popping up!! I'm sooo glad that you were able to help me get rid of it!! Thanks

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.