OSFirewall.exe and Fake Suspicious Warning

OS Firewall is a scareware program from the Rogue family that displays fake security alerts that state your computer is infected and then prompts you to call the 1-855-270-1376 remote tech support number. These alerts are worded to scare you into thinking your computer has a problem so that you call the listed number. These telephone numbers, though, are for remote support companies who will try to sell you unnecessary support services or software.

When OSFirewall is installed it will be copied into %AppData%\Microsoft\OSFirewall.exe and will display a constant stream of fake security warnings. These security warnings state that a virus has been detected or that there is suspicious activity found on your computer. The text of these alerts is:

Security Warning
Suspicious Activity Found
During a routine scan, We’ve found a possible virus, we cannot automatically remove. Please call the number listed below to get step by step guidance to secure your computer.
Call Now: +1-855-270-1376

Another alert that is displayed will contain the following message:

We Cannot Remove This Virus Automatically. Please Call Right Away

It is important to note that the OS Firewall is is installed by free programs that you download from the Internet, which did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay close attention to license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you immediately cancel the install and not use the free software.

As you can see, this infections is designed purely to scare you into calling the remote support number so that they can sell you technical support services. It is strongly advised that you do not call the number, and if you already have called them and paid for services, to contact your credit card provider to dispute the charges. To remove the OS Firewall scareware and related programs, please you use the removal guide below to remove it and other related programs for free.