SpyBlocker

Posted: August 2, 2011

SpyBlocker is a rogue anti-spyware program that uses typical rogue security product behavior, including false positives, fake scanner results and outright deceptive marketing to make you believe that SpyBlocker is a real security product. Despite combing over SpyBlocker with a fine-tooth comb, SpywareRemove.com research team hasn't found even a hint of real spyware-detection or spyware-deletion code. If you've been tricked into believing that SpyBlocker has your best interests at heart or you've purchased the 'full' version of this rogue security program, you'll quickly find out that the criminals that market this SpyBlocker are interested only in charging your credit card several times over.

Looking Beyond SpyBlocker's Cardboard Cutout Spyware Infections

SpyBlocker isn't able to find spyware or any other real infection on your PC, but SpyBlocker still will not waver in presenting you countless fake warnings in lieu of real ones. SpyBlocker pop-ups will create problems that actually don't exist on your PC, such as out of RAM errors and fake spyware detections. This behavior and similar error messages are also parceled out to rogue anti-spyware programs from the same family as SpyBlocker, including Unlimited Defender, Bogema Security, Ultimate Guard, Clean Security and Ultimate Scan.

SpywareRemove.com malware analysts have also seen SpyBlocker and related rogue security programs being sold with minor name differences, such as Unlimited Defender 2011. Despite the implications of these names, SpyBlocker isn't the latest version of an older SpyBlocker prototype, but just a copy of other rogue anti-spyware programs that all have been distributed in 2011.

Due to SpyBlocker's utter lack of real security features, purchasing SpyBlocker is a pointless endeavor. In fact, this actually will endanger your finances, since SpywareRemove.com malware research team has uncovered the shady past of SpyBlocker criminals that involves repeated and fraudulent credit card bills.

Blocking SpyBlocker from Indulging in Its Fake Anti-Spyware Scam

Due to the fact that many rogue security programs like SpyBlocker will also block security-related programs, exert control over your web browser or alter Windows settings, you should consider SpyBlocker to be a direct PC security threat and treat SpyBlocker appropriately. However, removing SpyBlocker without the help of suitable program isn't an ideal solution, since SpyBlocker may make Registry alterations and other changes that aren't linked directly to SpyBlocker's files.

Most SpyBlocker infections originate from the SpyBlocker website, Spy-blocker.com, although Zlob and Fake Microsoft Security Essentials Alert Trojans may also try to install SpyBlocker. Interacting with the website or deliberately downloading SpyBlocker aren't the only ways to be infected by SpyBlocker, since drive-by-download scripts and other browser vulnerabilities can be used to install SpyBlocker without your consent.

To keep SpyBlocker off of your PC so that you never need to learn how to remove SpyBlocker properly, stay away from suspicious websites, disable Java and Flash from unsafe sources, keep your anti-malware products up-to-date and install program and upgrades from official sources. Finally, if you've bought SpyBlocker, SpywareRemove.com malware experts strongly recommend that you cancel your credit card, since the risk of being charged multiple times for scamware products is extremely high.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%Documents and Settings%\[USERNAME]\Application Data\[RANDOM CHARACTERS].exe

File name: %Documents and Settings%\[USERNAME]\Application Data\[RANDOM CHARACTERS].exe
File type: Executable File
Mime Type: unknown/exe

Registry Modifications

The following newly produced Registry Values are:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SpyBlocker"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"