Home Malware Programs Fake Warning Messages Spyware Alarm! Pop-up

Spyware Alarm! Pop-up

Posted: April 24, 2009

"Spyware Alarm!" Pop-up is nothing more than a counterfeit system alert created and maintained by the rogue anti-spyware application MalwareCleaner. Like most other deceptive software, MalwareCleaner uses pop-up windows like "Spyware Alarm!" Pop-up in order to scare you into purchasing the full version of MalwareCleaner. The "Spyware Alarm!" Pop-up reads as follows:

"Spyware alarm! Our scan has reported that pieces of malicious spyware code are present on your hard drive. To get rid of security threats, click here for a Malware Cleaner scan."

Should you fall for this trickery and purchase MalwareCleaner, you will be obtaining an application that is entirely worthless. Save your money and remove "Spyware Alarm!" Pop-up from your system immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\Desktop\Malware Cleaner.lnk
    2 %UserProfile%\Start Menu\Malware Cleaner\Malware Cleaner.lnk
    3 %UserProfile%\Start Menu\Malware Cleaner\Uninstall.lnk
    4 c:\Program Files\Internet Explorer\ojcveq.scr
    5 c:\Program Files\Movie Maker\usjkeulr.com
    6 c:\Program Files\NetMeeting\qornq.com
    7 c:\Program Files\RRC\bcaumiqw.exe
    8 c:\Program Files\Trend Micro\toiqqpd.scr
    9 c:\Program Files\WinPcap\pidekwim.com
    10 c:\WINDOWS\Driver Cache\rndwvgl.com
    11 c:\WINDOWS\network diagnostic\rkvxcdcn.com
    12 c:\WINDOWS\Registration\wtadnnyj.scr
    13 c:\WINDOWS\system32\2052\pqsgeijl.scr
    14 c:\WINDOWS\system32\CatRoot2\gappbmks.com
    15 c:\WINDOWS\system32\icsxml\lujogyl.scr
    16 c:\WINDOWS\system32\mui\qrpsv.scr
    17 c:\WINDOWS\system32\mwhbmksa.com
    18 c:\WINDOWS\system32\SoftwareDistribution\pxfdlcox.scr

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Malware Cleaner"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Malware Cleaner
Loading...