Windows Efficiency Reservoir

By ESGI Advisor in Rogue Anti-Spyware Program | 101 views
Rate it:
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
More... More

Windows Efficiency Reservoir Description

Image Screenshot

[+] Click Image to Enlarge

Despite Windows Efficiency Reservoir’s appearance, ESG security analysts have identified Windows Efficiency Reservoir as a rogue security program. Malware like Windows Efficiency Reservoir is designed to impersonate a legitimate security application while actually attempting to extort money from the victim. There are hundreds of fake security programs like Windows Efficiency Reservoir, many of these directly related to this fake security program. Windows Efficiency Reservoir belongs to a family of rogue security applications known as the FakeVimes family of rogue anti-virus programs. This family of malware has been active since 2009, which is an advantage for PC security researchers since most legitimate security software can easily handle a Windows Efficiency Reservoir infection. However, Windows Efficiency Reservoir belongs to a batch of FakeVimes malware which includes such pests as Windows Custodian Utility, Windows Activity Debugger and Windows Shielding Utility.

The main problem with this latest batch of malware is that it is often bundled along with a rootkit infection which makes detection and removal of Windows Efficiency Reservoir a lengthier and more difficult process than normal. To deal with a Windows Efficiency Reservoir infection, ESG malware analysts recommend using a trustworthy anti-malware tool provided with anti-rootkit technology. Using a specialized anti-rootkit utility first should allow easy removal of Windows Efficiency Reservoir from your computer system.

A Basic Understanding of How the Windows Efficiency Reservoir Scam Works

The Windows Efficiency Reservoir scam attempts to convince computer users to purchase a non-existent, and completely useless “full version” of Windows Efficiency Reservoir. To do this, this fake security program will claim that the victim’s computer is severely infected with numerous viruses and Trojan infections. However, attempting to fix these supposed infections with Windows Efficiency Reservoir will result in error messages and redirects to Windows Efficiency Reservoir’s web page. These messages will inform the computer user that the selected problems cannot be removed unless the victim purchases the “full version” of Windows Efficiency Reservoir.

It is important to note that ESG malware analysts have not detected any anti-virus function within the Windows Efficiency Reservoir program. Rather, this fake security program seems to be designed to do little more than display alarming and misleading error messages and direct the victim to purchase its supposed “full” version. Once purchased, the Windows Efficiency Reservoir and its associated malware will remain on the infected computer system still causing problems and redirects.

Type: Rogue AntiSpyware Programs

How Can You Detect Windows Efficiency Reservoir?

‘How Windows Efficiency Reservoir Infects Your Computer’ Video

Windows Efficiency Reservoir Removal Details

Windows Efficiency Reservoir has typically the following processes in memory:

  • %AppData%\Inspector-[RANDOM CHARACTERS].exe
  • %AppData%\npswf32.dll

Windows Efficiency Reservoir creates the following files in the system:

  • %CommonPrograms%\Windows Efficiency Reservoir.lnk
  • %DesktopDir%\Windows Efficiency Reservoir.lnk

Windows Efficiency Reservoir creates the following registry entries:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”

Important Article Disclaimer

ESG Support Center

This entry was last updated on 04/6/12 and posted on 04/6/12. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Comment

Note: Abusive comments are not allowed. Please do not post comments regarding technical support issues. ESG customers that have issues with SpyHunter should open a customer support ticket.

*
To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
Click to hear an audio file of the anti-spam word

Home | SpyHunter Risk Assessment Model | Privacy Policy | End User License Agreement | Additional Terms and Conditions
Copyright 2003-2012. Enigma Software Group USA, LLC. All Rights Reserved.