Home Malware Programs Fake Warning Messages 'Google has detected…' Fake Warning Page

'Google has detected…' Fake Warning Page

Posted: April 2, 2009

The 'Google has detected...' web page is a fake warning page that imitates Google to make you believe that you should purchase System Protector or a similar type of fraudulent anti-malware software. As an easily-detected symptom of infection by System Protector or related PC threats, the appearance of a 'Google has detected...' web page should always be considered a warning signal to scan your PC with dedicated anti-malware software. SpywareRemove.com malware researchers note that not only does 'Google has detected...' web page deliver fraudulent alerts, but also that the real Google website will never promote any kind of software in this fashion. The 'Google has detected...' web page's proffered product, System Protector, is a rogue anti-malware program that's incapable of protecting your PC, although its appearance has been copied from the legitimate Spy Protector brand. Any signs of the presence of a 'Google has detected...' web page or System Protector should always be considered a threat to your computer's security until they're removed.

The 'Google has detected...' web page – a Prelude to More Fake Detections Than You Can Count

The 'Google has detected...' web page is a side effect of a browser hijack attack that's caused by System Protector or related PC threats that can redirect your web browser. In most scenarios, a 'Google has detected...' web page will appear only after you try to reach the real Google, in which case you'll find yourself at a lookalike, the 'Google has detected...' web page. 'Google has detected...' web pages look identical to Google with the exception of an unusual error message, which SpywareRemove.com malware researchers have noted for reference:

Google has detected that you are using the unregistered copy of System Protector. System Protector is recommended by Google for the best Web surfer safety level.
Register Now and get the max level secure browsing!

Naturally, the real Google company doesn't promote software in this fashion, and SpywareRemove.com malware experts advise against spending money on System Protector, which is confirmed to be scamware. Since a 'Google has detected...' web page normally will appear after your PC is infected by System Protector's 'free' version, you should consider its presence a warning signal, and scan your computer to remove System Protector, as well as the 'Google has detected...' web page hijacks.

Wresting the Real Google Back from the Hands of 'Google has detected...' Web Page Substitutes

Successfully removing 'Google has detected...' web page alerts can't be achieved by switching your web browser or changing its settings, since System Protector will simply restore its browser changes as long as it's on your computer. Other symptoms of System Protector that may trouble make it more difficult than usual to halt 'Google has detected...' web page attacks include:

  • You may experience additional browser hijacks that block PC security sites. SpywareRemove.com malware research team notes that these can be averted if you can disable System Protector and any other malicious software by using Safe Mode or other safety procedures to stop their startup routines.
  • System Protector will also create other warning messages and alerts about infections that seem to be on your PC. However, just like the 'Google has detected...' web page, these alerts are fraudulent and may even harm your computer if you follow their recommendations.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\Application Data\SpyProtectorSC_Base_new.dat
    2 %UserProfile%\Application Data\SpyProtectorSC_Config.ini
    3 %UserProfile%\Desktop\System Protector.lnk
    4 %UserProfile%\Start Menu\Programs\System Protector\Purchase License.url
    5 %UserProfile%\Start Menu\Programs\System Protector\Support Page.url
    6 %UserProfile%\Start Menu\Programs\System Protector\System Protector.lnk
    7 C:\WINDOWS\system32\spyprotector.cpl
Loading...