Home Malware Programs Fake Warning Messages ‘Warning! Spyware detected on your computer!’ Message

‘Warning! Spyware detected on your computer!’ Message

Posted: August 25, 2011

Warning! Spyware detected on your computer!'Warning! Spyware detected on your computer!' is a warning that Zlob Trojans use to install fake security, defragmenter or other forms of rogue security applications onto your PC. Zlob Trojans and similar dropper Trojans such as Vundo, Fake Microsoft Security Essentials Alert or Trojan-dropper.win32.VB.agtq create these messages in the form of pop-ups and desktop background images, and use them to market links to fake software that attempts to steal credit card-linked finances. Because any contact with websites that are associated with 'Warning! Spyware detected on your computer!' can harm your PC, you should remove 'Warning! Spyware detected on your computer!' from your computer with the help of an appropriate anti-malware product while simultaneously evading any attempts from 'Warning! Spyware detected on your computer!' to lure you into an easy infection route.

Clearcut Ways to Detect a Fake 'Warning! Spyware detected on your computer!' Alert

'Warning! Spyware detected on your computer!' can appear when your PC has already become infected by a Zlob Trojan or similar infection, or when your browser loads a malicious website or advertisement that creates a 'Warning! Spyware detected on your computer!' pop-up. In either case, 'Warning! Spyware detected on your computer!' is consistent in its delivery aesthetics and can be easily identified if you're willing to look for 'Warning! Spyware detected on your computer!' by the signs that SywareRemove.com malware researchers have uncovered.

'Warning! Spyware detected on your computer!' will always create an error with the following text, in full:

'Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer'

Below this warning, 'Warning! Spyware detected on your computer!' will pretend to detect a random Trojan, keylogger, worm or other high-level threat (such as Win32/Adware.Virtumonde, Backdoor.win32.scrab.p, Net-Worm.Win32.Koobface.iap or Win32/PrivacyRemoverM64); notably, some 'Warning! Spyware detected on your computer!' warnings will mix fictitious PC threats with real ones. Naturally, the source of this 'Warning! Spyware detected on your computer!' alert isn't able to detect genuine threats to your computer, and you should never trust a strange infection warning from a source that you haven't verified to be reputable.

Typical 'Warning! Spyware detected on your computer!' pop-ups will pretend to be from Windows, but differences in interface (such as a prominent red title bar) in addition to the message, as noted above, can tip you off to the fake nature of 'Warning! Spyware detected on your computer!'

Problems Related to 'Warning! Spyware detected on your computer!' That You Should Be Ready to Beat Down

The appearance of a 'Warning! Spyware detected on your computer!' pop-up may only be the start of your problems, unfortunately, since both routes of exposure to 'Warning! Spyware detected on your computer!' also contain risk of infection even if you avoid clicking on the 'Warning! Spyware detected on your computer!'' scamware link. 'Warning! Spyware detected on your computer!' pop-ups may use drive-by-download scripts to install a rogue security program onto your PC, while Zlob and other dropper Trojans that create 'Warning! Spyware detected on your computer!' errors are also capable of installing rogue software without your consent.

Typical issues that SywareRemove.com malware experts have found to be associated with 'Warning! Spyware detected on your computer!' and related PC threats include:

  • Other fake pop-ups that warn you about infections that aren't on your PC. These are often caused by rogue security programs on an incessant basis to frighten you into purchasing their fraudulent wares. Alfa Defender Pro, Total Virus Scanner, Registry Virus Scanner, Antivirus Center and RealClean are all examples of common scamware products.
  • An unusual desktop image that's been changed to resemble a 'Warning! Spyware detected on your computer!' message or a similar infection warning. In most cases, infections that change your desktop will also disable Windows features that would allow you to revert this undesired change.
  • Browser hijacks may cause pop-ups of 'Warning! Spyware detected on your computer!' to appear on a regular basis, change your homepage, block PC security websites or force your browser to load hostile sites.

Malware Automatic Detection Tool (Recommended)

Is your PC infected with malware caused by the 'Warning! Spyware detected on your computer!' message? To safely & quickly detect malware, we highly recommend you...



Warning! Spyware detected on your computer! Screenshot 2

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\WINDOWS\system32\[RANDOM CHARACTERS].bmp File name: C:\WINDOWS\system32\[RANDOM CHARACTERS].bmp
Mime Type: unknown/bmp
C:\WINDOWS\system32\[RANDOM CHARACTERS].scr File name: C:\WINDOWS\system32\[RANDOM CHARACTERS].scr
Mime Type: unknown/scr
%UserProfile%\Local Settings\Temp\cidrules.dll File name: %UserProfile%\Local Settings\Temp\cidrules.dll
File type: Dynamic link library
Mime Type: unknown/dll
%UserProfile%\Local Settings\Temp\wincore.dll File name: %UserProfile%\Local Settings\Temp\wincore.dll
File type: Dynamic link library
Mime Type: unknown/dll
%System%\cidrules.dll File name: %System%\cidrules.dll
File type: Dynamic link library
Mime Type: unknown/dll
%System%\winupd.dll File name: %System%\winupd.dll
File type: Dynamic link library
Mime Type: unknown/dll
%System%\wincore.dll File name: %System%\wincore.dll
File type: Dynamic link library
Mime Type: unknown/dll
lspak.dll File name: lspak.dll
File type: Dynamic link library
Mime Type: unknown/dll
virtumonde.dll File name: virtumonde.dll
File type: Dynamic link library
Mime Type: unknown/dll

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{CLSID Path}HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats \{FDA4DFFB-2C3D-4730-8D7E-28523C7F2F67}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDA4DFFB-2C3D-4730-8D7E-28523C7F2F67}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA21E6FA-41D9-4F05-9650-8B3FBE72124D}scanHKEY_CLASSES_ROOT\CLSID\{FDA4DFFB-2C3D-4730-8D7E-28523C7F2F67} \Windows\CurrentVersion\Ext\Stats\{CA21E6FA-41D9-4F05-9650-8B3FBE72124D}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA21E6FA-41D9-4F05-9650-8B3FBE72124D}HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Control Panel\Desktop OriginalWallpaper "C:\WINDOWS\system32\[RANDOM CHARACTERS].bmp"HKEY_CURRENT_USER\Control Panel\Desktop Wallpaper "C:\WINDOWS\system32\[RANDOM CHARACTERS].bmp"HKEY_CURRENT_USER\Control Panel\Desktop SCRNSAVE.EXE "C:\WINDOWS\system32\[RANDOM CHARACTERS].scr"HKEY_CURRENT_USER\Control Panel\Desktop ConvertedWallpaper "C:\WINDOWS\system32\[RANDOM CHARACTERS].bmp"HKEY_CLASSES_ROOT\DosSpecFolder.DosSpecFolderHKEY_CLASSES_ROOT\DosSpecFolder.DosSpecFolder.1HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEpl.IEplHKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEpl.IEPl.1HKEY_LOCAL_MACHINE\SOFTWARE\TargetSoftHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tdev HKEY_USERS\S-1-5-21-1887652994-1477516851-2064603551-500\Software\Microsoft

Additional Information

The following messages's were detected:
# Message
1Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer

Loading...