Windows Security 2011 is classified as a rogue antivirus program that falsely alerts and reports security threats on a user’s computer. These rogue and or fake security programs are distributed for the purpose of stealing your money by scamming users into purchasing a license copy in order to remove the fake threats.
Windows Security 2011 will block certain programs from running to prevent the Malware from being removed before the user forks over money. It’s common that these programs will block users from browsing certain web sites that offer legitimate virus removal. The program will also install spyware and KeyLoggers which can be used to record sensitive data such as banking information.
The most annoying issue is all the fake pop-up notifications in the system tray notifying you that your computer is infected. Every time Windows starts this fake security program runs and will start reporting fake threats.
How to Remove Windows Security 2011
- Reboot your PC and hit F8 to run your computer in Safe Mode with Networking.
- Download MalwareBytes to your desktop and rename it to Explorer.exe as Windows Security 2011 blocks the program named MalwareBytes. If you can’t download files, try using another machine that’s not infected and saving the files to a flash drive or other storage device.
- Download and Run RKILL to stop all background processes related to Windows Security 2011.
- Launch MalwareBytes and run a (Full Scan) to remove infections.
- Delete the file called “Hosts” in C:\Windows\System32\Drivers\etc\HOSTS and add the default Hosts file (below) for your operating system in C:\Windows\System32\Drivers\etc\
a. Windows XP HOSTS File Download Link
b. Windows 7 HOSTS File Download Link
- Reboot your computer.
Your computer should be clean and working normal again.
Windows Security 2011 is in the same family as Security Tool and System Tool.
Related Computer Security Articles
StumbleUpon Shares Serving Up Trojans
Facebook Trojan Spreads Rapidly
Fake Antivirus Outpaces Real Antivirus
Thanks again frank! Just bought new Pc for store, now to keep Nikki off the applications on facebook
Susie,
Cool deal! Hope you got a good deal which I know you did because you shop!
I had this once… and fixed it with Ubuntu.
No more malware. PERIOD!
Thanks for the alert,Frank.I am going to run a scan this evening.
No more malware. Thanks for the alert, I am going to run a scan
Windows Security protect my computer, i don’t understand why? we are remove it .
They look so genuine ! We can’t really understand if it’s real or not
Nasif,
That’s why the crooks are getting richer because it looks so real.
Very helpful, Thank you
thank you for information….
This is so nasty stuff that it has driven me nuts not once but twice.
My laptops was affected when I clicked on image from Google image search.
The best to remove is to download MalwareBytes and do a full search and remove it. It worked for me both times.
It is shame that McAfee can’t detect it.
Ajay,
It is best to run a full scan in safe mode with networking. Glad you were able to remove this parasite.
Oh yes! I had to run in safe mode. You can’t get this parasite removed in normal mode.
First time I did some quick removal and it seemed to work. I didn’t have much time to investigate what this stuff was.
When I was bitten 2nd time I did a full research on this malware and removed it completely.
Prevention is always better than cure. I wish I hadn’t clicked on those nice pics ;)
It was a virus like this that really got me. Its not that I didn’t know that it was a scam, its that I didn’t know how to get rid of it. It completely shut me out so I couldn’t do anything. I couldn’t even access HELP. I ended up having to call a technician and paying $69 and being without a computer for a day because of it. I wish I had known about your website before, maybe I could have avoided the whole incident. I’m prepared now. Thanks in part to you!
I never had this virus but once I saw it on my friend’s laptop. It was scary. She couldn’t figure out what went wrong, it looked like real security message.