Home Malware Programs Spyware SpyWatchE


Posted: June 14, 2008

Threat Metric

Threat Level: 6/10
Infected PCs: 16
First Seen: July 24, 2009
Last Seen: January 10, 2019
OS(es) Affected: Windows

ScreenshotSpyWatchE is a rogue anti-spyware application that creates warnings about spyware programs that aren't on your PC. Its aim in doing so is to encourage you to spend money to purchase its 'full' version, although neither version of SpyWatchE can find or remove actual PC threats. SpyWatchE, like many types of scamware, is often installed by Trojans such as Zlob or Vundo, and may also include secondary functions such as browser redirect attacks, creating junk files or spawning legions of pornographic pop-ups. SpywareRemove.com malware analysts suggest that you avoid likely sources of infection by SpyWatchE, such as fake codec downloads, whenever possible, and delete SpyWatchE with qualified anti-malware products if you do have the misfortune to be attacked by SpyWatchE.

A Few Reasons to Watch Out for SpyWatchE's Antics

SpyWatchE belongs to the same family of scamware as SpySheriff, SpyShredder, MagicAntiSpy and similar types of fake anti-spyware applications. Although SpyWatchE and its kin pretend to monitor your PC for spyware that can be removed, SpyWatchE isn't able to find actual spyware or remove it. SpyWatchE's swarm of toolbar notifications and other warning messages will only alert you to random PC threats that may or may not be on your computer – SpyWatchE certainly has no way to tell one way or the other. Since these attacks are aimed at getting you to spend money on SpyWatchE, you should be wary about redirects to SpyWatchE's website or other marketing efforts that encourage you to give up your money and credit card information to anonymous criminals.

Along with these symptoms, SpyWatchE may also create unusual pop-up windows or trash files in an attempt to make your computer look as though it's more infected than it is in reality. SpywareRemove.com malware researchers note that you can stop all of these problems by just removing SpyWatchE with good anti-malware software, and clean up any remnants of a SpyWatchE infection, such as its junk files, after you've gotten rid of the source.

Secondary Threats from a SpyWatchE to Tiptoe Around

SpyWatchE may also be accompanied by Trojans, such as Zlob or Vundo, that commonly install scamware like SpyWatchE. As a result, a complete system scan should be launched after confirmation of any SpyWatchE infection, since removing SpyWatchE by itself may fail to catch related PC threats that can simply re-install SpyWatchE or other scamware. Although SpyWatchE and other types of rogue anti-spyware programs also include removal tools, you should never trust these tools to remove SpyWatchE and undo its system changes, which can also include Windows Registry-based attacks.

SpywareRemove.com malware researchers also warn to be cautious about contact with SpyWatchE's website, spywatche.com, which may use drive-by-download attacks against your PC. Strong security settings can help your web browser in avoiding such attacks, although a perfect defense against zero-day exploits is effectively impossible and should never be attempted in lieu of having dependable security software.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

TheSpyWatchESetup[1].exe File name: TheSpyWatchESetup[1].exe
Size: 50.17 KB (50176 bytes)
MD5: 87fb17ef33af9077143962266908cd5e
Detection count: 77
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
SpyWatchE.exe File name: SpyWatchE.exe
Size: 423.42 KB (423424 bytes)
MD5: 66a00040e5bede41eff16b4ac6f4ba98
Detection count: 39
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009

Additional Information

The following directories were created: