1 of 6
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Changes background
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:
WindowsConcernSystem

Windows Concern System

The Fake Microsoft Security Essentials scam comprises a huge number of rogue antispyware applications, and it is still growing by every single day. Windows Concern System is the newest rogue, right off the conveyer belt and it has the same features as its forerunners, including Windows Verifying Center, Windows Necessary Firewall, Windows Efficiency Analyzer and many more. Windows Concern System poses as a legitimate security program and it manages to fool a lot of computer users worldwide. This fraud ends up in multiple system crashes and empty banks accounts, but one should start from the very beginning.

Windows Concern System enters your computer without your knowledge or consent. This rogue utilizes various distribution methods and can be found lurking in infected websites, behind various flashy advertisements, random links and what not. It is not hard to catch the attention of an average computer user saying that, for example, a virus has been detected in his computer, and he must click on the link or the ad for more information, or even to perform a quick system scan.

That one click is enough to let Windows Concern System in. When the rogue is perfectly installed and ready to go, it launches a fake system scan, giving security ranking to various system components. Naturally, the overall security system will be ranked as low and the rogue will try to persuade you that you need to do something about it by sending you various fake security notifications, such as:

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

Warning!
Location: c:\windows\system32\taskmgr.exe
Viruses: Backdoor.Win32.Rbot

Your duty in this situation is to ignore these messages and don’t pay attention to the scan results. Windows Concern System only wants to rip you off, and it hinders your computer’s performances in attempt to do that. If you want your computer to go back to normal, you need to remove Windows Concern System at once. Acquire a reliable antimalware program, which will delete the rogue automatically for you, if don’t know how to do it manually. Just don’t allow it to stay in your system any longer.

Download Spyware Removal Tool to Remove* Windows Concern System
  • Quick & tested solution for Windows Concern System removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Concern System

Files associated with Windows Concern System infection:

%AppData%\Microsoft\[random].exe

Windows Concern System processes to kill:

%AppData%\Microsoft\[random].exe

Remove Windows Concern System registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
Disclaimer

Comments

  1. SAM Jun 14, 2011

    Thank you so much. if you have this problem, you can trust these guys.

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.