Windows Support System (WindowsSupportSystem) Virus Removal Guide

Virus Type: Rogue Security Application
Threat Level: 8 / 10

Windows Support System, also known as WindowsEmergencySystem, is a new fake security application which claims to offer System Security, Privacy, System Utilities, System Information, Media Tools, and Internet Security. Windows Support System was recently introduced around March 2023 and is generally installed without user permission through the use of a trojan horse, which is downloaded when visiting specific websites on the internet. Windows Support System attempts to look legitimate by making itself look like the legitimate Microsoft Security Essentials program. In doing so, it hopes to trick the user into purchasing the fake program since it may look like a legitimate program to the user. For example, Windows Support System will create a Microsoft Security Essentials Alert in order to trick the user into thinking Windows Support System is affiliated with Microsoft Security Essentials. Windows Support System is a clone of previous fake antivirus programs; for example, Windows Support System and Windows Emergency System look very similar except for a change in the name of the fake program. Windows Support System is similar in functionality to ThinkPoint and CleanThis. Windows Support System main executable is generally a series of random letters. Generally, most fake antivirus programs now have file names which change from computer to computer. A changing file name is generally done to make it harder for the user to find and remove. Previously, most fake antivirus applications used to have fixed file names.

Below is our recommended removal tool for Windows Support System. The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

If you are unable to run the removal tool, or are unable to run any programs in general, you may need to stop the processes associated with Windows Support System with task manager. If task manager has been blocked by Windows Support System, try using Process Explorer.

Windows Support System, like many other fake antivirus programs, will create a series of warnings and pop ups in order to scare the user into purchasing the fake program. Windows Support System may also create these warnings in an attempt to make it look legitimate. Some of these warnings which are created by Windows Support System can be found below.

“Microsoft Security Essentials detected potential threats that might compromise your privacy or damage your computer. Your access to these items may be suspended until you take an action. Click ‘Show details’ to learn more.”

“Warning

Potentially harmful software is detected. To enable the security mode and remove harmful software it is recommend to perform a cleanup.

Deny
Forbid the execution of potentially harmful software.

Enable Protection
Click to activate antivirus and remove all infections.”

This two different warnings are generally shown when opening programs on the computer.

“Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.

Risk of system files infection: High.

The detected vulnerability may result in unauthorized access to private information and hard drive data with a serious possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press ‘OK’ to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.”

“The Customer service is not available for the users of Windows Support System free version. Please register your Windows Support System version to be able to use all the functionalities.”

It is recommended to use safe mode when removing the virus because Windows Support System will generally not be able to load in safe mode. To enter safe mode, restart the computer and press F8 multiple times before the Windows screen to bring up the boot options.

Boot Menu

The safe mode with networking option will allow the user to be able to use the internet in safe mode. Windows Support System can be removed by using the

or by manually removing the virus.

View Windows Support System Files
View Windows Support System Keys

Common symptoms and characteristics of Windows Support System and other rogue security programs include:
1. Windows Support System is generally installed without user permission.
2. Windows Support System uses pop ups and fake virus scans to scare the user.
3. Various antivirus and system programs on the user’s computer will stop functioning.

The user comments for ThinkPoint may provide insight into removing Windows Support System since the viruses are similar.

Manual Windows Support System Removal – In order to manually remove Windows Support System, the processes associated with Windows Support System must be stopped, the files associated with the processes must be removed, and the registry entries must be corrected to the previous state before Windows Support System entered the computer.

Important: Before attempting to manually remove Windows Support System, we recommend that the user read through comments posted by other users on how they removed specific fake antivirus programs since many fake antivirus programs are similar. These comments can be found by clicking here. These comments may provide additional information which may be useful in removing Windows Support System. However, please use discretion since these specific comments pertain to other fake antivirus programs.

Stop Windows Support System Processes (Learn How To Do This)
[random letters].exe

Remove Windows Support System Files (Learn How To Do This)
C:\Documents and Settings\[username]\Local Settings\Application Data\[random letters].exe

Remove Windows Support System Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER\Software\Windows Support System
HKEY_LOCAL_MACHINE\SOFTWARE\Windows Support System
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows Support System

Remove Windows Support System Startup Entry (Learn How To Do This)
[random letters].exe

Common Questions -
1. What is a computer virus? (Click Here To View)
2. How did I get this computer virus? (Click Here To View)
3. What common symptoms show that my computer may be infected? (Click Here To View)
4. What is a rogue security application? (Click Here To View)
5. What are some antivirus and antispyware programs which I can use to remove viruses and spyware? (Click Here To View)

If you have any questions or comments, please don’t hesitate to comment below. If you need any help with any of the steps, please don’t hesitate to comment below. We recommend that you follow our safety tips so that you can keep your computer clean Please Click Here to View Our Safety Tips.

Your feedback is very highly valued by others so please feel free to comment below. Please feel free to share a solution that you may have used to remove Windows Support System.

This entry was posted on Monday, March 21st, 2024 at 5:39 pm and is filed under Malware Removal. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

2 Responses to “Windows Support System (WindowsSupportSystem) Virus Removal Guide”

neil phillips March 22nd, 2024 at 10:20 pm

ive gone into the path you and everyone else has told me to remove the startup entry, or rename it, application data/microsoft where i should find the execute file related to the virus(random letters) but there are no files there, i have set it to show hidden files, but its still not appearing, where else could it be?

Jon March 23rd, 2024 at 12:11 pm

Hi Neil,

Do you have Windows XP or Vista / Windows 7. Vista / Windows 7 will have a different file path since the file organization is different on that operating system. You may be able to find it here

C:\Users\[username]\AppData\Local

Leave a Reply