Home Malware Programs Fake Warning Messages Detected security problems on your computer Popup

Detected security problems on your computer Popup

Posted: October 16, 2009

"Detected security problems on your computer" popup is a fake security alert meant to mislead computer users into purchasing the rogue software Trust Fighter. "Detected security problems on your computer" popup is one of many fake messages that appear on the malicious website Yourguardonline.com.

The following is the text of the "Detected security problems on your computer" popup message:

"Detected security problems on your computer.
Spyware is software, which can gather information from user's computer through Internet connection and send them to its creator. Gather information can be passwords, e-mail addresses and all that data, which is important for you."

If you click the "Fix Now" link on the popup message, you will automatically be redirected to a malicious website where Trust Fighter is available for download. Do not be fooled by the "Detected security problems on your computer" popup and do not purchase the bogus software Trust Fighter.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Desktop\TrustFighter.lnk
    2 %Documents and Settings%\All Users\Start Menu\Programs\TrustFighter
    3 %Documents and Settings%\All Users\Start Menu\Programs\TrustFighter\1 TrustFighter.lnk
    4 %Documents and Settings%\All Users\Start Menu\Programs\TrustFighter\2 Homepage.lnk
    5 %Documents and Settings%\All Users\Start Menu\Programs\TrustFighter\3 Uninstall.lnk
    6 %Program Files%\TrustFighter Software
    7 %Program Files%\TrustFighter Software\TrustFighter
    8 %Program Files%\TrustFighter Software\TrustFighter\license.txt
    9 %Program Files%\TrustFighter Software\TrustFighter\trustsoldier.exe
    10 %Program Files%\TrustFighter Software\TrustFighter\uninstall.exe
    11 %WINDOWS%\102z6w59m3c4.cpl
    12 %WINDOWS%\1044zhackt9ol5b2.dll
    13 %WINDOWS%\10683v9rzs656.cpl
    14 %WINDOWS%\10915hief309z.cpl

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "TrustFighter"HKEY_CURRENT_USER\Software\TrustFighterHKEY_LOCAL_MACHINE\SOFTWARE\TrustFighterHKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\EnumHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrustFighterSvcnum\Root\LEGACY_TRUSTFIGHTERSVCHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}TrustFighter

Additional Information on Detected security problems on your computer Popup

  • The following messages's were detected:
    # Message
    1 Detected security problems on your computer Spyware is software, which can gather information from user’s computer throught Internet connection and send them to its creater. Gather information can be passwords, e-mail addresses and all that data, which is important for you.
Loading...