Threat Database Fake Error Messages 'Spyware Protect 2009 Windows Security Alert' Fake Message

'Spyware Protect 2009 Windows Security Alert' Fake Message

'Spyware Protect 2009 Windows Security Alert' or simply 'Windows Security Alert', is a fake system alert created by rogue anti-spyware application Spyware Protect 2009. The alert message reads as follows:

"Windows Security alert. Windows reports that this computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here to scan your computer. Your system might be at risk now."

Following this security notification's prompts will result in the user downloading and installing the fake spyware remover Spyware Protect 2009.

File System Details

'Spyware Protect 2009 Windows Security Alert' Fake Message may create the following file(s):
# File Name Detections
1. c:\WINDOWS\aazalirt.exe
2. c:\WINDOWS\iddqdops.exe
3. c:\WINDOWS\jungertab.exe
4. c:\WINDOWS\klopnidret.exe
5. c:\WINDOWS\iqmcnoeqz.exe
6. c:\WINDOWS\ktknamwerr.exe
7. c:\WINDOWS\krujmmwlrra.exe
8. c:\WINDOWS\otowjdseww.exe
9. c:\WINDOWS\tobmygers.exe
10. c:\WINDOWS\otnnbektre.exe
11. c:\WINDOWS\ronitfst.exe
12. c:\WINDOWS\zibaglertz.exe
13. SysGuard.exe
14. c:\WINDOWS\dkewiizkjdks.exe
15. c:\WINDOWS\jrjakdsd.exe
16. c:\WINDOWS\kkwknrbsggeg.exe
17. c:\WINDOWS\ienotas.exe
18. c:\WINDOWS\krtawefg.exe
19. c:\WINDOWS\krkmahejdk.exe
20. c:\WINDOWS\ooorjaas.exe
21. c:\WINDOWS\skaaanret.exe
22. c:\WINDOWS\otpeppggq.exe
23. c:\WINDOWS\oranerkka.exe
24. c:\WINDOWS\seeukluba.exe
25. SpywareProtect2009.exe
26. c:\WINDOWS\dkekkrkska.exe
27. c:\WINDOWS\jikglond.exe
28. c:\WINDOWS\jiklagka.exe
29. c:\WINDOWS\kitiiwhaas.exe
30. c:\WINDOWS\irprokwks.exe
31. c:\WINDOWS\krkdkdkee.exe
32. c:\WINDOWS\kuruhccdsdd.exe
33. c:\WINDOWS\sysguardn.exe
34. c:\WINDOWS\tobykke.exe
35. c:\WINDOWS\oropbbsee.exe
36. c:\WINDOWS\rkaskssd.exe
37. vbzlib2.dll
38. Spyware Protect 2009.lnk
39. Uninstall Spyware Protect 2009.lnk

Registry Details

'Spyware Protect 2009 Windows Security Alert' Fake Message may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Spyware Protect 2009
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\uninstall\Spyware Protect 2009
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Spyware Protect 2009
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "sysguardn"

URLs

'Spyware Protect 2009 Windows Security Alert' Fake Message may call the following URLs:

adwareguard.net
antivguardian.com
antivirus-win.com
antiwareprotect.com
browser-security.microsoft.com
os-protection.com
sp-protect2009.com
spwprotect2009.com
spy-protec.com
spy-protect-2009.com
spyprotect2009.com
spyware-protector-2009.com
spywprotect.com
spywrprotect-2009.com
swp2009.com
sys-protection.com
sysguard2009.com
sysprotect.net

Trending

Most Viewed

Loading...