Threat Database Rogue Anti-Spyware Program Fake Windows Malicious Software Removal Tool

Fake Windows Malicious Software Removal Tool

Fake Windows Malicious Software Removal Tool is a fake security application that pretends to be the MSRT or Malicious Software Removal Tool which is a legitimate security program offered by Microsoft. Fake Windows Malicious Software Removal Tool is designed by hackers to trick computer users into purchasing a fake security application. Fake Windows Malicious Software Removal Tool is exploited through a Trojan infection which is known to populate the program files directory with a malicious executable named "MalwareRemoval.exe" and install a "MalwareRemoval" directory with the "Security Center.exe" file.

Upon starting up of Windows, MalwareRemoval.exe will load and then display a screen that resembles the legitimate MSRT application in hopes that a computer user will click on a function to remove certain infections that it supposedly found. If clicked on, Fake Windows Malicious Software Removal Tool may redirect you to a malicious site that sells other security applications.

File System Details

Fake Windows Malicious Software Removal Tool may create the following file(s):
# File Name Detections
1. C:\Program Files\MalwareRemoval\Security Center.exe
2. C:\Program Files\MalwareRemoval\MalwareRemoval.exe
3. %UserProfile%\Application Data\MalwareRemoval
4. %UserProfile%\Application Data\SetupMalwareRemoval\spl.ini
5. C:\Documents and Settings\\Start Menu\Programs\MalwareRemoval
6. %UserProfile%\Application Data\SetupMalwareRemoval
7. C:\Program Files\MalwareRemoval
8. %UserProfile%\Application Data\MalwareRemoval\MalwareRemoval.ini

Registry Details

Fake Windows Malicious Software Removal Tool may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "WindowsMaliciou SoftwareRemovalTool"

Trending

Most Viewed

Loading...