'Warning!' Wallpaper

'Warning!' Wallpaper Description

"Warning!" Wallpaper is a symptom of being infected with rogue anti-spyware application WinBlueSoft. This desktop "Warning!" wallpaper is created by WinBlueSoft in order to frighten users into purchasing this fake spyware remover. It reads:

"Warning! You're in danger! Your computer is infected with Spyware! All you do with computers is stored forever in your hard disk. When you visit sites, send emails... All your actions are logged. And it is impossible to remove them with standard tools. Your data is still available for forensics. And in some cases for your boss, your friends, your wife, your children. Every site you or somebody or even something, like spyware, opened in the browsers, with all the images, and all the downloaded and maybe later removed movies or mp3 songs - ARE STILL THERE and could break your life! Secure yourself right now! Remove all Spyware from your PC!"

WinBlueSoft creates other fake warnings, such as popups, spoof system alerts, etc., to scare you into thinking you’ve got spyware. If you follow these prompts, you will automatically download WinBlueSoft.

Technical Information

File System Details

'Warning!' Wallpaper creates the following file(s):
# File Name Detection Count
1 C:\Windows\System32\blocker.dll N/A
2 c:\Program Files\WinBlueSoft Software\WinBlueSoft\WinBlueSoft.exe N/A
3 c:\Program Files\WinBlueSoft Software\WinBlueSoft\uninstall.exe N/A
4 c:\Documents and Settings\All Users\Desktop\WinBlueSoft.lnk N/A
5 c:\Documents and Settings\All Users\Start Menu\Programs\WinBlueSoft\3 Uninstall.lnk N/A
6 c:\Documents and Settings\All Users\Start Menu\Programs\WinBlueSoft N/A
7 c:\Program Files\WinBlueSoft Software\WinBlueSoft\license.txt N/A
8 c:\Documents and Settings\All Users\Start Menu\Programs\WinBlueSoft\2 Homepage.lnk N/A
9 c:\Program Files\WinBlueSoft Software\WinBlueSoft N/A
10 c:\Program Files\WinBlueSoft Software\WinBlueSoft\data.bin N/A
11 c:\Documents and Settings\All Users\Start Menu\Programs\WinBlueSoft\1 WinBlueSoft.lnk N/A
12 c:\Program Files\WinBlueSoft Software N/A

Registry Details

'Warning!' Wallpaper creates the following registry entry or registry entries:
Registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinBlueSoft"
HKEY_LOCAL_MACHINE\SOFTWARE\WinBlueSoft
HKEY_CURRENT_USER\Software\WinBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinBlueSoft