Microsoft’s Malicious Software Removal Tool update removes Win32/Winwebsec and Win32/FakePowav.B,” revealed Christopher Budd. Winwebsec goes by different names (“System Security” and “Winweb Security”), typical of a rogue. One less common feature is that it has been known to download additional malware. For a short time it downloaded Worm:Win32/Koobface (which we added to MSRT in March). This brings us full circle: one of the ways we have seen people directed to Win32/Winwebsec’s fake online scanner is via Win32/Koobface. Koobface can launch pop-ups which load fake online scanners. At one time it was FakeXPA, at another it was Win32/Winwebsec. Koobface doesn’t seem attached to a specific rogue.
More Info: Download