Remove "Warning! Spyware detected on your computer!" (Uninstall Guide)

If your computer has a blue desktop background and a yellow/blue warning in the middle saying "Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer" then your computer is infected with a Trojan horse. Although, it's an old fake security warning, it's still being used by cyber-criminals to scare you into believing that your computer is infected with viruses. The Trojan horse that displays this fake warning distributes rogue security software and other malware. This fake "Warning! Spyware detected on your computer!" Trojan creates a couple of randomly named .scr and .bmp files in C:\Windows\System32 folder and replaces the original values in Windows registry. It also drops other offending files that download/request other malicious files from Internet. Fake security warnings are nothing new for Windows users. If you Desktop background was replaced with a fake warning sign or you keep getting random pop-ups, please run a full system scan with anti-malware software. Good luck and be safe online!



Download free anti-malware software from the list below and run a full system scan.

• MalwareBytes Anti-malware
• SUPERAntispyware
• Spybot S&D
• Hitman Pro 3.5

NOTE: in some cases the rogue program may block anti-malware software. Before saving the selected program onto your computer, you may have to rename the installer to iexplore.exe, explorer.exe or winlogon.exe. With all of these tools, if running Windows 7 or Vista they MUST be run as administrator. Launch the program and follow the prompts. Don't forget to update the installed program before scanning.

New threats appear every day. In order to protect your PC from such (new) infections we strongly recommend you to use ESET NOD32 Antivirus 4.

---

Associated files and registry values:

Files:

• C:\WINDOWS\system32\[SET OF RANDOM CHARACTERS].scr
• C:\WINDOWS\system32\[SET OF RANDOM CHARACTERS].bmp

Registry values:

• HKEY_CURRENT_USER\Control Panel\Desktop SCRNSAVE.EXE "C:\WINDOWS\system32\[SET OF RANDOM CHARACTERS].scr"
• HKEY_CURRENT_USER\Control Panel\Desktop ConvertedWallpaper "C:\WINDOWS\system32\[SET OF RANDOM CHARACTERS].bmp"
• HKEY_CURRENT_USER\Control Panel\Desktop OriginalWallpaper "C:\WINDOWS\system32\[SET OF RANDOM CHARACTERS].bmp"
• HKEY_CURRENT_USER\Control Panel\Desktop Wallpaper "C:\WINDOWS\system32\[SET OF RANDOM CHARACTERS].bmp"

Share this information with other people: