‘Warning! Spyware detected on your computer!’ Message
'Warning! Spyware detected on your computer!' is a warning that Zlob Trojans use to install fake security, defragmenter or other forms of rogue security applications onto your PC. Zlob Trojans and similar dropper Trojans such as Vundo, Fake Microsoft Security Essentials Alert or Trojan-dropper.win32.VB.agtq create these messages in the form of pop-ups and desktop background images, and use them to market links to fake software that attempts to steal credit card-linked finances. Because any contact with websites that are associated with 'Warning! Spyware detected on your computer!' can harm your PC, you should remove 'Warning! Spyware detected on your computer!' from your computer with the help of an appropriate anti-malware product while simultaneously evading any attempts from 'Warning! Spyware detected on your computer!' to lure you into an easy infection route.
Clearcut Ways to Detect a Fake 'Warning! Spyware detected on your computer!' Alert
'Warning! Spyware detected on your computer!' can appear when your PC has already become infected by a Zlob Trojan or similar infection, or when your browser loads a malicious website or advertisement that creates a 'Warning! Spyware detected on your computer!' pop-up. In either case, 'Warning! Spyware detected on your computer!' is consistent in its delivery aesthetics and can be easily identified if you're willing to look for 'Warning! Spyware detected on your computer!' by the signs that SywareRemove.com malware researchers have uncovered.
'Warning! Spyware detected on your computer!' will always create an error with the following text, in full:
'Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer'
Below this warning, 'Warning! Spyware detected on your computer!' will pretend to detect a random Trojan, keylogger, worm or other high-level threat (such as Win32/Adware.Virtumonde, Backdoor.win32.scrab.p, Net-Worm.Win32.Koobface.iap or Win32/PrivacyRemoverM64); notably, some 'Warning! Spyware detected on your computer!' warnings will mix fictitious PC threats with real ones. Naturally, the source of this 'Warning! Spyware detected on your computer!' alert isn't able to detect genuine threats to your computer, and you should never trust a strange infection warning from a source that you haven't verified to be reputable.
Typical 'Warning! Spyware detected on your computer!' pop-ups will pretend to be from Windows, but differences in interface (such as a prominent red title bar) in addition to the message, as noted above, can tip you off to the fake nature of 'Warning! Spyware detected on your computer!'
Problems Related to 'Warning! Spyware detected on your computer!' That You Should Be Ready to Beat Down
The appearance of a 'Warning! Spyware detected on your computer!' pop-up may only be the start of your problems, unfortunately, since both routes of exposure to 'Warning! Spyware detected on your computer!' also contain risk of infection even if you avoid clicking on the 'Warning! Spyware detected on your computer!'' scamware link. 'Warning! Spyware detected on your computer!' pop-ups may use drive-by-download scripts to install a rogue security program onto your PC, while Zlob and other dropper Trojans that create 'Warning! Spyware detected on your computer!' errors are also capable of installing rogue software without your consent.
Typical issues that SywareRemove.com malware experts have found to be associated with 'Warning! Spyware detected on your computer!' and related PC threats include:
- Other fake pop-ups that warn you about infections that aren't on your PC. These are often caused by rogue security programs on an incessant basis to frighten you into purchasing their fraudulent wares. Alfa Defender Pro, Total Virus Scanner, Registry Virus Scanner, Antivirus Center and RealClean are all examples of common scamware products.
- An unusual desktop image that's been changed to resemble a 'Warning! Spyware detected on your computer!' message or a similar infection warning. In most cases, infections that change your desktop will also disable Windows features that would allow you to revert this undesired change.
- Browser hijacks may cause pop-ups of 'Warning! Spyware detected on your computer!' to appear on a regular basis, change your homepage, block PC security websites or force your browser to load hostile sites.
Malware Automatic Detection Tool (Recommended)
![]() |
Download SpyHunter's* Malware Scanner to detect Malware. |
What happens if malware does not let you open SpyHunter or blocks the Internet? |
Use SpyHunter to Detect and Remove PC Threats
If you are concerned that malware or PC threats similar to ‘Warning! Spyware detected on your computer!’ Message may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.
* See Free Trial offer below. EULA and Privacy/Cookie Policy.
Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:C:\WINDOWS\system32\[RANDOM CHARACTERS].bmp
File name: C:\WINDOWS\system32\[RANDOM CHARACTERS].bmpMime Type: unknown/bmp
C:\WINDOWS\system32\[RANDOM CHARACTERS].scr
File name: C:\WINDOWS\system32\[RANDOM CHARACTERS].scrMime Type: unknown/scr
%UserProfile%\Local Settings\Temp\cidrules.dll
File name: %UserProfile%\Local Settings\Temp\cidrules.dllFile type: Dynamic link library
Mime Type: unknown/dll
%UserProfile%\Local Settings\Temp\wincore.dll
File name: %UserProfile%\Local Settings\Temp\wincore.dllFile type: Dynamic link library
Mime Type: unknown/dll
%System%\cidrules.dll
File name: %System%\cidrules.dllFile type: Dynamic link library
Mime Type: unknown/dll
%System%\winupd.dll
File name: %System%\winupd.dllFile type: Dynamic link library
Mime Type: unknown/dll
%System%\wincore.dll
File name: %System%\wincore.dllFile type: Dynamic link library
Mime Type: unknown/dll
lspak.dll
File name: lspak.dllFile type: Dynamic link library
Mime Type: unknown/dll
virtumonde.dll
File name: virtumonde.dllFile type: Dynamic link library
Mime Type: unknown/dll
Registry Modifications
HKEY..\..\{CLSID Path}HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats \{FDA4DFFB-2C3D-4730-8D7E-28523C7F2F67}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDA4DFFB-2C3D-4730-8D7E-28523C7F2F67}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA21E6FA-41D9-4F05-9650-8B3FBE72124D}scanHKEY_CLASSES_ROOT\CLSID\{FDA4DFFB-2C3D-4730-8D7E-28523C7F2F67} \Windows\CurrentVersion\Ext\Stats\{CA21E6FA-41D9-4F05-9650-8B3FBE72124D}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA21E6FA-41D9-4F05-9650-8B3FBE72124D}HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Control Panel\Desktop OriginalWallpaper "C:\WINDOWS\system32\[RANDOM CHARACTERS].bmp"HKEY_CURRENT_USER\Control Panel\Desktop Wallpaper "C:\WINDOWS\system32\[RANDOM CHARACTERS].bmp"HKEY_CURRENT_USER\Control Panel\Desktop SCRNSAVE.EXE "C:\WINDOWS\system32\[RANDOM CHARACTERS].scr"HKEY_CURRENT_USER\Control Panel\Desktop ConvertedWallpaper "C:\WINDOWS\system32\[RANDOM CHARACTERS].bmp"HKEY_CLASSES_ROOT\DosSpecFolder.DosSpecFolderHKEY_CLASSES_ROOT\DosSpecFolder.DosSpecFolder.1HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEpl.IEplHKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEpl.IEPl.1HKEY_LOCAL_MACHINE\SOFTWARE\TargetSoftHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tdev HKEY_USERS\S-1-5-21-1887652994-1477516851-2064603551-500\Software\Microsoft
Additional Information
# | Message |
---|---|
1 | Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer |
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.