- slide 1 of 2
Did you receive an alert that says “Warning! Spyware detected on your computer! Install antivirus or spyware remover to clean your computer”? If so, you are dealing with a fake warning message by a ransomware or rogue antispyware program.
A system is 100% infected with a rogue, misleading, or ransomware program if it is displaying a pop-up or balloon notification that says that spyware has been detected on your computer with an instruction to install an antivirus or antispyware program. Anther symptom of infection is the desktop background displaying a similar warning message. How to get rid of these Windows spyware warnings? Below, you will find the solution to remove the infection that will also get rid of spyware warnings.
If the installed browser in the currently infected system will not open, download the following programs using another computer:
- Microsoft Fix it 50267
- SUPERAntiSpyware Portable
- Microsoft Windows Malicious Software Removal Tool
- Malwarebytes’ Anti-Malware
- A-squared Free
- and the slim installer of CCleaner.
Save these programs in your desktop or in flash drive.
If you cannot open any installed applications on your PC, the ransomware or rogue program is blocking them from opening. To bypass the rogue program, execute Rkill.exe or exeHelper.scr. (See the guide for using Rkill.) Please note that exeHelper works like Rkill. It will also shutdown the malicious processes of ransomware and rogue antispyware program. You do not need to use Rkill or exeHelper if you have no problem in opening a program.
- slide 2 of 2
Fixing the Hosts File and Running the Scans
In some cases, the browser is redirected to unwanted website. To fix this problem, ensure the Windows Hosts file has not been modified, but to make sure that you have the default Hosts file, execute the Microsoft Fix it 52067 to reset the Hosts file.
Proceed to running a scan using any of the following malware scanner and remover programs that you have downloaded and stored in the flash drive or saved on the desktop: SUPERAntiSpyware Portable, Windows Malicious Software Removal Tool, A-squared Free or Malwarebytes’ Anti-Malware. Allow the scanner to remove the detected objects. Note that it is not necessary to run a full system scan. The said malware scanner and remover programs are providing a quick scan with the ability to scan the locations where the malware is known to hide or install.
Reboot the computer then run another scan until the scanner reports that the computer is clean from any infection. It is a good idea to run a scan using several malware scanners because there's no single antimalware program is capable to finding all kind of infections. Try scanning the computer using the other scanners that you've downloaded and again, allow the scanner to disinfect the PC.
Verify that the computer is not infected by a rootkit, scan the computer using a standalone rootkit scanner and remover e.g. Avira AntiRootkit Tool, Sophos Anti-Rootkit, Panda Anti-Rootkit, or F-Secure Blacklight.
Install CCleaner to clean-up the system and Internet files. To prevent being infected again, keep your programs up-to-date. If the Windows spyware warning messages continue to appear, you should proceed to visiting a malware removal forum offering removal assistance by some volunteers.