Windows Malware Sleuth
Windows Malware Sleuth Description
Sorting Through the Evidence of Windows Malware Sleuth’s Numerous Crimes
Windows Malware Sleuth’s aesthetics are built off of a Windows Security Center-based template that’s rotated throughout the FakeVimes family of scamware, each member of which bears a different name but the same goal in mind – to annoy and frighten you until you buy a full version of the software in question. While Windows Malware Sleuth and other fake anti-virus scanners from the Rogue.FakeVimes group are able to create very convincing warning messages and alerts that can be displayed in various ways (such as within your web browser or as a taskbar notification), SpywareRemove.com malware researchers emphasize that Windows Malware Sleuth isn’t able to provide any system information that isn’t fraudulent.
As is typical for fake anti-virus scanners of its ilk, Windows Malware Sleuth also subscribes to a philosophy of refusing to be uninstalled or even disabled. On Windows-based computers, Windows Malware Sleuth will launch itself automatically and conduct its fake alerts, system scans and other attacks without your consent. SpywareRemove.com malware analysts note that Safe Mode, also commonly available on most Windows PCs, is one of the easiest ways to disable Windows Malware Sleuth so that you can scan your PC and remove Windows Malware Sleuth without further problems. Similar tactics are also effective against clones of Windows Malware Sleuth, such as Live PC Care, Windows Profound Security, Windows Care Taker, Windows Enterprise Defender, Windows Web Combat, Strong Malware Defender, Windows Virtual Security, Windows Custom Safety, Windows Sleek Performance, Windows Active Defender, Windows Smart Partner, Windows Firewall Constructor, Windows PC Aid, Smart Internet Protection 2011, Windows Telemetry Center, Windows Threats Destroyer, Windows Protection Unit, Windows Custodian Utility, Windows Proactive Safety, Fast Antivirus 2009, Windows Personal Doctor, Windows Guard Tools, Windows Efficiency Accelerator, Windows Secure Workstation, Windows System Defender, Best Malware Protection, Windows Software Keeper, Windows Ultimate Security Patch, Volcano Security Suite, Windows Home Patron, Windows Protection Master, Windows Safety Module, Windows Antivirus Rampart, Windows Premium Defender, Windows PRO Scanner, Windows Control Series, Windows First-Class Protector, Windows Web Commander, Windows Protection Maintenance, Windows Turnkey Console, XP Smart Security, Windows Active Guard, Windows Problems Stopper, Windows Guardian Angel, Windows Shield Tool, Windows Safety Manager, Windows Pro Safety Release, Windows Virus Hunter, Best Antivirus Software, Windows Secure Web Patch, Windows Anti-Malware Patch, Personal Internet Security 2011, Windows Abnormality Checker, Windows Private Shield, Windows Privacy Extension, Virus Doctor, CleanUp Antivirus, Windows Trouble Taker, Windows Stability Guard, Windows Software Saver, Windows Safety Wizard, Windows Interactive Safety, Home Safety Essentials, Windows Privacy Counsel, My Security Shield, System Protection Tools, Security Master AV, Windows Performance Catalyst, Windows Managing System, Windows AntiHazard Center, Windows Functionality Checker, Windows Advanced Security Center, Windows Defence Counsel, Smart Security, Extra Antivirus, Windows Maintenance Suite, Windows Multi Control System, Smart Internet Protection 2012, Windows No-Risk Agent, Windows Expert Series, Smart Anti-Malware Protection, Additional Guard, Windows Guard Solutions, Live Enterprise Suite, Windows High-End Protection, Windows Secure Surfer, Windows Premium Guard, Internet Security Essentials, VirusSecurity, Windows Smart Warden, Windows Crucial Scanner, Windows Maintenance Guard, Home Malware Cleaner, Windows Privacy Module, Windows Antivirus Release, Windows Security Suite, Windows Performance Adviser, Windows Pro Safety, Windows Premium Console, Windows Pro Web Helper, My Security Engine, Smart Engine, Windows No-Risk Center, Windows Pro Rescuer, Windows Internet Booster, Windows ProSecurity Scanner, Windows Proprietary Advisor, Windows ProSecure Scanner, Windows Safeguard Upgrade, Windows Security Renewal, Windows Virtual Firewall, Windows Antivirus Machine, Security Antivirus, Windows Basic Antivirus, Windows Secure Workshop, Windows Pro Solutions, Windows Custom Management, Windows Safety Checkpoint, Windows Risk Minimizer, Windows Debug Center, Windows Defending Center, Total Anti Malware Protection, Activate Ultimate Protection, PC Live Guard, Windows Antivirus Patch, Windows Process Director, Windows Antivirus Care, Windows Security System, Windows Tools Patch, My Security Wall, Windows Advanced User Patch, Windows AntiHazard Helper, Windows Safety Maintenance, Windows Pro Defence, Personal Security Sentinel, Windows Advanced Toolkit, Smart Virus Eliminator, Windows Instant Scanner, Windows Health Keeper, Windows Interactive Security, Keep Center Keeper, Antivirus Smart Protection, Windows Warding System, Internet Security Suite, Windows Be-on-Guard Edition, PrivacyGuard PRO, Anti-Malware Lab, Windows Activity Debugger, Windows Shielding Utility, Windows Safety Toolkit, Windows Ultimate Safeguard, Windows Enterprise Suite, Windows Safety Series, Enterprise Suite, Windows Antihazard Solution, Windows Daily Adviser and Windows Virtual Angel.
The Final Windows Malware Sleuth Attacks That Seal the Deal
While poor threat detection is worth labeling Windows Malware Sleuth a nuisance, SpywareRemove.com malware research team recommends that you treat Windows Malware Sleuth as an actively malicious threat to your PC, since Windows Malware Sleuth and similar Rogue.FakeVimes-based PC threats are known for additional hostilities. Common issues that can persist until Windows Malware Sleuth is deleted by appropriate anti-malware products include such problems as:
- Browser-based redirect attacks. Redirects may be used to display fake warning messages, control your search results, take you to Windows Malware Sleuth’s website or block PC security sites.
- Blocked applications. In most cases, Windows Malware Sleuth will block programs by displaying an inaccurate warning message, but with regards to the Task Manager and Registry Editor, Windows Malware Sleuth actually will replace them with its own Advanced Process Control window.
Windows Malware Sleuth Automatic Detection Tool (Recommended)
Is your PC infected with Windows Malware Sleuth? To safely & quickly detect Windows Malware Sleuth, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect Windows Malware Sleuth
What happens if Windows Malware Sleuth does not let you open SpyHunter or blocks the Internet?
Visual & GUI Characteristics
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read
the tutorials on how to find malware,
kill unwanted processes,
remove malicious DLLs and
delete other harmful files. Always be
sure to back up your PC before making any changes.
- The following files were created in the system:
# File Name Detection Count 1 Windows Malware Sleuth.lnk 389 2 %APPDATA%\ Protector-sba.exe 272 3 %AppData%\NPSWF32.dll N/A 4 %AppData%\result.db N/A 5 %AppData%\Protector-[RANDOM 3 CHARACTERS].exe N/A 6 %CommonStartMenu%\Programs\Windows Malware Sleuth.lnk N/A 7 %Desktop%\Windows Malware Sleuth.lnk N/A
Registry Modifications
Tutorial: To edit and delete registry entries manually, read the tutorial on
how to remove malicious registry entries.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
- The following newly produced Registry Values are:
HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = 2012-3-4_1HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "wbukxhryfk"HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\antivirus.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autoupdate.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avpdos32.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\brasil.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\csc.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\exe.avxw.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hbinst.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jdbgmrg.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mcvsrte.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nav.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nupgrade.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\pctsTray.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\qh.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SecurityFighter.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchostc.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vbust.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\win32us.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
Additional Information
- The following messages's were detected:
# Message 1 Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.2 Warning! Virus Detected
Threat detected: FTP Server
Infected file: C:\Windows\System32\dllcache\wmpshell.dll3 Warning
Firewall has blocked a program from accessing the Internet
C:\program files\internet explorer\iexplore.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Posted: March 4, 2012 | By SpywareRemove
Share:
Threat Level: 10/10
Rate this article:
Detection Count: 77


More

I can not get online because of windows sleuth ink. What can I do I can not keep useing the work computer.
This is not my computer I am useing to cantact you. My computer will not stay online long enough to down load your anti spy ware program. Windows sleuth is killing me, I have to do all my stuff at work. Not good if I am cought by my boss. Can you help me.