Threat Database Fake Error Messages 'Warning!' Wallpaper

'Warning!' Wallpaper

"Warning!" Wallpaper is a symptom of being infected with rogue anti-spyware application WinBlueSoft. This desktop "Warning!" wallpaper is created by WinBlueSoft in order to frighten users into purchasing this fake spyware remover. It reads:

"Warning! You're in danger! Your computer is infected with Spyware! All you do with computers is stored forever in your hard disk. When you visit sites, send emails... All your actions are logged. And it is impossible to remove them with standard tools. Your data is still available for forensics. And in some cases for your boss, your friends, your wife, your children. Every site you or somebody or even something, like spyware, opened in the browsers, with all the images, and all the downloaded and maybe later removed movies or mp3 songs - ARE STILL THERE and could break your life! Secure yourself right now! Remove all Spyware from your PC!"

WinBlueSoft creates other fake warnings, such as popups, spoof system alerts, etc., to scare you into thinking you’ve got spyware. If you follow these prompts, you will automatically download WinBlueSoft.

File System Details

'Warning!' Wallpaper may create the following file(s):
# File Name Detections
1. C:\Windows\System32\blocker.dll
2. c:\Program Files\WinBlueSoft Software\WinBlueSoft\WinBlueSoft.exe
3. c:\Program Files\WinBlueSoft Software\WinBlueSoft\uninstall.exe
4. C:\Documents and Settings\\Desktop\WinBlueSoft.lnk
5. C:\Documents and Settings\\Start Menu\Programs\WinBlueSoft\3 Uninstall.lnk
6. C:\Documents and Settings\\Start Menu\Programs\WinBlueSoft
7. c:\Program Files\WinBlueSoft Software\WinBlueSoft\license.txt
8. C:\Documents and Settings\\Start Menu\Programs\WinBlueSoft\2 Homepage.lnk
9. c:\Program Files\WinBlueSoft Software\WinBlueSoft
10. c:\Program Files\WinBlueSoft Software\WinBlueSoft\data.bin
11. C:\Documents and Settings\\Start Menu\Programs\WinBlueSoft\1 WinBlueSoft.lnk
12. c:\Program Files\WinBlueSoft Software

Registry Details

'Warning!' Wallpaper may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinBlueSoft"
HKEY_LOCAL_MACHINE\SOFTWARE\WinBlueSoft
HKEY_CURRENT_USER\Software\WinBlueSoft
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinBlueSoft

Trending

Most Viewed

Loading...