How To Remove Win 8 Security System Virus – Fake Win 8 Antivirus Security Tool Removal Instructions (Scareware)

What is Win 8 Security System (Win 8 Virus)?

Win 8 Security System, part of the Braviax family of malware, is malicious rogue software categorized as Scareware, disguised as a fake Antivirus scan/Security tool that is used by cyber criminals to scare computer users into believing their computers are corrupted, facing critical errors and/or infected with malware,Trojans, viruses, and worms. The purpose of the Win 8 Security System virus is to persuade victims into purchasing the extended license of their fake Win 8 Security software using these shameless tactics.

Please note, activating and purchasing the license for fake software such as Win 8 Security System is very dangerous and will not fix issues or symptoms inherited from the Win 8 Security System virus. NEVER give your credit card information to cyber criminals.

Win 8 Security System Threats

The Win 8 Security virus can also remain hidden on an operating system in order to collect personal victim data and orchestrate malicious attacks against the computer which may involve tracing and tracking computer activity and keystrokes.

Malware and viruses such as Win 8 Security System are capable of loading to a computer bundled with third party infections including malware and Trojans. This means Win 8 Security may not be the  only issue facing your computer and scareware tactics may not be the only symptom.

Win 8 Security System Virus Process

• The Win 8 Security virus is contracted and initiated by use of Trojans that allow Win 8 Security to override normal operating system functions and block legitimate Antivirus software from detecting the Win 8 virus.
• The rogue Win 8 Security System software attempts to disguise itself as a real a Antivirus, diagnostics tool, and performs fake scans, followed by fake notifications, and other fake alert style messages stating the computer is negatively affected by malware such as adware and especially spyware, and Trojans. A fake Win 8 Security message is detailed below:

Threat Detected
Security Alert! Your computer was found to be infected with privacy-threatening software. Private data may get stolen and system damage may be severe.
Recover your PC from the infection right now, perform a security scan.

• The Win 8 Security System virus finally attempts to persuade the computer user into activating it by purchasing the fake Win 8 Security extended license via online payment systems.

How can I get infected with the Win 8 virus?

There are many Win 8 Security viruses, Win 8 Security System being only one of them. The Win 8 viruses can be contracted by visiting websites hosting malware, downloading freeware and shareware or suspicious media and programs online including torrents and browser add-ons such as Toolbars. To get infected with a Win 8 virus a computer user may have also fallen victim to phishing, such as spam emails and telephone scams.

1. Antivirus & Anti-Malware Sofware

In order to remove the Win 8 Security System virus we recommend running a full system scan using a reputable Antivirus or Anti-Malware program. In particular, Malwarebytes – the most recommended Antivirus/Anti-Malware software used to scan, detect, and remove malware including rogue software and scareware. View other Antivirus recommendations.

2. System Restore

Perform a system restore to an automatic restore point created by Window’s each week or during system updates. System restores are an easy and great way to remove malware and unwanted programs that may have infected your system without permission.

• View complete system restore instructions

3. Uninstall/Manually Remove Win 8 Security System

Use the steps below to manually remove the Win 8 virus.

Even though I stated earlier, activating and purchasing the software is dangerous. If you wish for Win 8 Security popups to be removed you can activiate Win 8 Security using the code below.

Y86REW-8F42D6E3-FD18

Please note, simply using the activation code does not protect you, nor your computer from further issues regarding the Win 8 virus. This optional activation code should only be used temporarily.

Uninstall Rogue Win 8 Security System From Control Panel

If possible, you might be able to uninstall the fake Win 8 software using Window’s Uninstaller. Believe it or not, many Scareware programs attempt to mimic legitimate installation tactics.

• Start > Settings > Control Panel > Uninstall a Program or Add/Remove Programs. To uninstall Win 8 Security System (etc), doube click the program on the list or select it and click the Uninstall button.

Kill Rogue Win 8 Security System Process

Press Ctrl+Shift+Esc on your keyboard and kil the Win 8 virus process under the processes tab.

[random].exe processes are random for Win 8 viruses, you should see strings like: 23433.exe, te3wwq.exe

Delete Rogue Win 8 Security System Files And Folders

This list is a collection of files and folders related to Win 8 viruses. If any of these files or folders are found on our system remove them immediately. Please note, the files and folders described may not be found on your system.

%Temp%\\[random].exe
%Temp%\\[random].dll
%Temp%\\wfrg
%Temp%\\dfrdgr
%Temp%\\.exe
%UserProfile%\\Desktop\\Smart HDD.lnk
%UserProfile%\\Start Menu\\Programs\\Win 8\\
%UserProfile%\\Start Menu\\Programs\Win 8\\Win8Security.lnk
%UserProfile%\\Start Menu\\Programs\\Win 8\\Uninstall Win8Security.lnk

Un-register Rogue Win 8 Security System DLLs

[random].dll DLLs are random for Win 8 viruses, you should see strings like: 495827.dll, wodweldr.dll

Delete Rogue Win 8 Security System Registry Entries

To access Window’s Registry Editor access Window’s Start Menu and type regedit into the search field followed by pressing Enter.

If located, remove Win 8 virus registry entries and values. *This list will receive updates.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"

4. Safe Mode With Networking (Troubleshoot)

Use Safe Mode with Networking to troubleshoot internet and network access. This can also be used to bypass issues affecting legitimate virus removal software caused by the Win 8 Security System virus and ransom lock Trojan.

1. Reboot your computer in Safe Mode with Networking. As the computer is booting tap the F8 key continuously to reach the correct screen.

2. On the Advanced Boot Options screen, use your keyboard to navigate to “Safe Mode with Networking” and press Enter.

The screen may appear black with the words “safe mode” in all four corners. Click your mouse where windows start menu is to bring up necessary browsing.

3. If you are able to access the internet, install software such as Malwarebytes and perform a full system scan. Malwarebytes will remove malware if detected.

4. If you still can’t access the Internet after restarting in safe mode, try resetting your Internet Explorer proxy settings.

How To Reset Internet Explorer Proxy Settings

• Option 1

In Windows 7 click the Start button . In the search box type run and in the list of results click Run.
-or-
In Windows Vista click the Start button and then click Run.
-or-
In Windows XP click Start and then click Run.

Copy and paste or type the following text in the Open box in the Run dialog box and click OK:

reg add “HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings” /v ProxyEnable /t REG_DWORD /d 0 /f

In Windows 7 click the Start button. In the search box type run and  in the list of results click Run.
-or-
In Windows Vista click the Start button and then click Run.
-or-
In Windows XP click Start and then click Run.

Copy and paste or type the following text in the Open box in the Run dialog box and click OK:

reg delete “HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings” /v ProxyServer /f

Restart Internet Explorer and then follow the steps listed previously to run the scanner

• Option 2

Launch Internet Explorer. In Internet Explorer go to: Tools >Internet Options >Connections tab.
Click Lan Settings button and uncheck the checkbox labeled Use a proxy server for your LAN. Click OK.

4. It is now recommended to download Malwarebytes (free or paid version, or other Antivirus / Anti-Malware software). Run a full system scan to detect and remove the Win 8 Security virus affecting your computer.