The program must be manually installed.
The program reports false or exaggerated system security threats on the computer.
The user is then prompted to pay for a full license of the application in order to remove the threats.
When the program is executed, it creates the following file:
Next, the program creates the following registry entries so that it executes whenever Windows starts:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"WindowsSecurity" = "[PATH TO PROGRAM EXECUTABLE]"
- HKEY_USERS\[UID]\Software\Microsoft\Windows\CurrentVersion\Run\"WindowsSecurity" = "[PATH TO PROGRAM EXECUTABLE]"