Home Malware Programs Spyware Windows System Integrity

Windows System Integrity

Posted: July 3, 2011

Windows System Integrity is a rogue application that fakes threat detection and other security features as part of a plan to make your PC appear to be heavily infected. In spite of Windows System Integrity's insistence that it can remove all threats once you purchase the full version of the program, Windows System Integrity can't detect or remove real PC threats. Problems linked to Windows System Integrity infections can include browser hijacks, disabled programs and fake pop-up alerts. Removing Windows System Integrity should be done expediently and with anti-virus software-based assistance whenever possible.

Windows System Integrity - Not So Integral to Your PC's Health

Windows System Integrity is a flat-out copy of other rogueware like Windows Stable Work, Windows Vulnerabilities Rescuer, Windows Proofness Guarantor and Windows AV Component. Like all these other fake programs, Windows System Integrity will pretend to scan your computer for security-related problems and monitor your updates, but all of the analysis information that Windows Proofness Guarantor provides is false and designed to make you think that your PC is hugely infected.

Windows System Integrity will use messages such as the examples listed here to bolster this impression:

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

Warning! Database update failed!
Database update failed!
Outdated viruses databases are not effective and can't [sic] guarantee adequate protection and security for your PC!
Click here to get the full version of the product and update the database!

System component corrupted!
System reboot error has occurred due to lsass.exe system process failure.
This may be caused by severe malware infections.
Automatic restore of lsass.exe backup copy completed.
The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.

Warning! Running trial version!
The security of your computer has been compromised!
Now running trial version of the software!
Click here to purchase the full version of the software and get full protection for your PC!

Warning!
Location: [application file path]
Viruses: Backdoor.Win32.Rbot

Warning!
Name: [application file name]
Name: [application file path]
Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.

You can safely ignore all of Windows System Integrity's warnings, since Windows System Integrity has no real anti-virus or security features.

Ending Windows System Integrity's Application Attacks

In fact, instead of providing any beneficial functions for your PC, Windows System Integrity will hamper your ability to use programs in two primary ways:

  • Some programs, particularly basic Windows applications (Task Manager, MSConfig, Registry Editor) or well-known anti-virus scanners may fail to function. Windows System Integrity uses Trojans to block these applications to prevent you from detecting or removing a Windows System Integrity infection, and in many cases, Windows System Integrity will even use a fake infection alert to justify this action.
  • With respect to your web browser, a Trojan may hijack it to determine which websites you can and can't access. If you notice that your homepage has been changed, that pop-ups are appearing for no reason, that search engine results are altered or that you're seeing unusual error screens, your browser may be hijacked.

Most Windows System Integrity infections are caused by Trojans (such as Zlob or Fake Microsoft Security Essentials Alert) that install a broad range of rogue security programs. Due to this and the likelihood of Windows System Integrity altering your Registry, you should avoid trying to delete Windows System Integrity solely by deleting the files. In most circumstances, the assistance of a good anti-malware program will help to make sure that Windows System Integrity's removal goes smoothly.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %AppData%\Microsoft\[RANDOM CHARACTERS].exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell "%AppData%\Microsoft\[RANDOM CHARACTERS].exe"

Additional Information on Windows System Integrity

  • The following messages's were detected:
    # Message
    1 Warning!
    Name: [application file name]
    Name: [application file path]
    Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.
    2 Warning! Running trial version!
    The security of your computer has been compromised!
    Now running trial version of the software!
    Click here to purchase the full version of the software and get full protection for your PC!
    3 Warning!
    Location: [application file path]
    Viruses: Backdoor.Win32.Rbot
    4 System component corrupted!
    System reboot error has occurred due to lsass.exe system process failure.
    This may be caused by severe malware infections.
    Automatic restore of lsass.exe backup copy completed.
    The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.
    5 Warning! Database update failed!
    Database update failed!
    Outdated viruses databases are not effective and can't [sic] guarantee adequate protection and security for your PC!
    Click here to get the full version of the product and update the database!
    6 System Security Warning
    Attempt to modify register key entries is detected. Register entries analysis is recommended.
Loading...