Your computer is infected with malicious software? Do you have pop-ups on your PC?
If so, search this blog for removal instructions or browse computer threats by category.

Thursday, July 28, 2011

Remove "Your computer is infected with Spyware!" Alert (Uninstall Guide)

Tell your friends:
We understand that sometimes it could be difficult to distinguish between legitimate security alerts and fake warnings saying that your computer is infected with spyware, adware, Trojans and other malware. Rogue security programs and similar scareware use fake security alerts to trick users into paying for completely useless security software or installing additional malware files on the compromised computer. Yesterday we stumbled upon some fake security alerts and error messages that we thing are worth mentioning here. "Your computer is infected with Spyware!" is a fake alert caused by malicious software, specifically a Trojan horse. Here's how the fake error notification about spyware looks like:
Error
Your computer is infected with Spyware! Detected malicious programs can damage your computer and compromise your privacy. It is strongly recommended to remove them immediately.


First thing that should caught your attention is the title of this security alert. Error. What does this say to you? Probably nothing because it's unclear what causes this alert. Is this your anti-virus software or maybe it's Windows system notification? If you can't tell that right away then it might be a sign of malware infection on your computer. In such case, you should scan your computer with legitimate anti-malware application. Here's another example:
Error
Surfing without protection tool installed may cause spyware intrusion through security holes in the Web browser or in other software.


Very often, cyber criminals use fake system warnings from the system tray saying that Spyware protection is disabled or your sensitive information can be stolen to make users think that they should install some sort of computer protection software. Here are some examples of fake system warnings:
System warning
Spyware protection is disabled. Your personal data is at high risk of being stolen or misused.

System warning
Keep your computer safe from viruses and malicious programs that can slow down or break your system


Such fake security alerts are very common right now. You should always check twice before clicking on suspicious notifications or running potentially unwanted applications; otherwise you may end up with heavily infected computer. If you're experiencing such fake security alerts, please scan your computer with anti-malware software listed below. If you have any questions or need help removing malware from your computer, please leave a comment below. Good luck and be safe online!


"Your computer is infected with Spyware!" removal instructions:

1. Download free anti-malware software from the list below and run a full system scan.
NOTE: in some cases the rogue program may block anti-malware software. Before saving the selected program onto your computer, you may have to rename the installer to iexplore.exe or winlogon.exe With all of these tools, if running Windows 7 or Vista they MUST be run as administrator. Launch the program and follow the prompts. Don't forget to update the installed program before scanning.


Associated "Your computer is infected with Spyware!" files and registry values:

Files:
  • C:\Documents and Settings\[UserName]\Desktop\FakeAV\[SET OF RANDOM CHARACTERS].exe
  • C:\Documents and Settings\LocalService\Local Settings\Application Data\[SET OF RANDOM CHARACTERS].exe

Registry values:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\[SET OF RANDOM CHARACTERS].exe
Share this information with other people:

5 comments:

Anonymous said...

I have the computer in safe mode and have completed a few full scans on malwarebytes and every result has detected and removed infected objects. However, it has not removed the two fake alerts. Should I keep conducting full scans until nothing shows up? Thank you for the advice

Admin said...

You should use another antimalware program. I recommend Hitman Pro and SUPERAntispyware. Both are free. Also update your antivirus software and run full system scan.

Hitman Pro: http://www.surfright.nl/en/hitmanpro

SUPERAntispyware: http://www.superantispyware.com

Good luck!

Anonymous said...

Thank you,

I used Hitman Pro a couple of the times and the fake alerts are gone. Nothing has popped up in the last 5 minutes since I restarted my computer.

Anonymous said...

I don't know if this will work for anyone else, but it worked for me.In "Task manager", under the 'applications' tab, it shows the error message.If you right click to get a menu,and go to the one that says "Go to process",it will automatically switch to the "processes" tab,and highlighted in blue is the process it's associated with.For me, that process was "DiscStreamHub.exe".I right clicked the process and chose "End Process". After I did that, I stopped getting the error pop up along with that triangle with an exclamation point icon that disappears when you hover your mouse over it.

Anonymous said...

My PC has been hijacked by one of these. Problem is, I can't run any anti-spyware/malware program as they've all been disabled as has my Windows Explorer. I can get in with safe mode, but again, the programs won't run.

I also can't login as admin because it's asking for a password which I never set.

Any suggestions?