Fake Windows Malicious Software Removal Tool

The Fake Windows Malicious Software Removal tool is the latest counterfeit to have hit the Internet Community. Guised as the legitimate software introduced by Microsoft in January 2005, namely: Windows malicious Software Removal Tool.

The legitimate application was designed by Microsoft to assist PC users in removing all malicious content from a computer system. Able to update on a monthly basis, Windows malicious Software Removal Tool is to be used to remove various types of infections on a Windows computer system.

However, hackers, being the creative designers and trend followers they are, have seized an opportunity to design a program which pretends to be a legitimate tool. In actual fact, the fake Windows malicious Software Removal Tool impersonates the real tool, but instead of removing infections, the fake Windows malicious Software Removal Tool will only attempt to sell the user its full version malware, and will in the mean time continue loading the infected system with even more infections and nefarious activity.

Once Windows malicious Software Removal Tool is installed within a computer system, it will create a file with the following name:

c:\Program Files\MalwareRemoval\MalwareRemoval.exe

This particular file will be launched every time the infected systems’ Windows is launched. With the fake Windows malicious Software Removal Tool running in the background, the user will soon be shown a screen which mimics the legitimate MSRT application; however the difference lies in the fact that when the fake tool scans the system, the following malware threats will be reported to the user:

Keylogger.Stawin
Spyware.ActivityKey
VBS.Lisa.A@MM
W32.HLLW.Oror.AI@mm
Trojan.Qhosts.C

As soon as the user clicks on the finish button of the fake scan, a window entitled: OEM Purchase Center will be displayed, which in turn will attempt to sell the user various software. As soon as the user clicks on the purchase link provided, the user will be redirected to the fake Windows malicious Software Removal Tool’s affiliated website, namely: oem-micro-store.com, where the user will be coerced once again into purchasing malware software, disguised as legitimate security tools.

Very important is for one to realize that all the infections Windows malicious Software Removal Tool claims to be present on an affected computer system is all fabricated, and one should definitely NOT trust the fake Windows malicious Software Removal Tool or its affiliates. More important to bear in mind that the ONLY infection one will have is the fake Windows malicious Software Removal Tool itself.

Another sign that a system has been infiltrated by the Windows malicious Software Removal Tool is the fact that every so often a security alert message will appear; the message may state the following:

“Security Warning:
Your computer is infected with malicious software. You should use antivirus product to remove it. Click this message to purchase recommended antivirus software.”

The only thing that will happen should you fall prey to this false security alert message is that once clicked on, the sure will be redirected to the affiliate website, where they will be coerced into purchasing the full version, or additional malware. Bear this in mind!

For these type Trojan Horse applications, the likes of this fake Windows malicious Software Removal Tool, the best way to deal with it would be to simply remove this application and all its affiliates as soon as it has been detected.