MalwareMonitor

6 October 2007 Rogue 0 Comment

MalwareMonitor is a rogue security program that displays exaggerated reports of detected threats on the computer. MalwareMonitor will penetrate a computer through the use of Trojan that is capable of downloading and executing a malware without users knowledge. Its presence may cause instability on the infected computer and also disables any installed anti-virus and firewall applications.

An attempt to remove indetified threats will prompt to pay for the registered version of the program.

Your computer is infected with Spyware.
Your Security and Privacy are in DANGER.
Spyware program can steal your credit card numbers and bank information details. The computer can be used for sending spam and you may get pop-ups with adults or anu other unwanted content.

Screen Shot Image:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

MalwareMonitor Removal Procedures

MalwareMonitor REMOVAL TOOL:
Efficient and complete removal of MalwareMonitor can be provided by Malwarebytes Anti-Malware. Please download, install and scan. If downloading is blocked by a virus, use a clean computer and save it to a Disc or USB drive and execute the removal on infected machine.
MANUAL REMOVAL:
1. Unload any running MalwareMonitor process by pressing Ctrl+Alt+Del on your keyboard. This will open Task Manager. Look for the following process and click “End Process”:
MalwareMonitor.exe

2. If there are antivirus programs installed, connect to Internet and update it to have the latest database and pattern files.
3. Thoroughly scan the computer and clean/delete all infected files. See lists of MalwareMonitor associated files below.
4. Edit Windows registry and delete malicious entries as stated below. [how to edit registry]
5. Close registry editor, changes will be save automatically.
6. Remove MalwareMonitor start-up entry by going to Start > Run, type msconfig on the “Open” dialog box. System Configuration Utility will open. Go to Startup tab and uncheck the following Startup item(s):
MalwareMonitor.exe

7. Click on Apply and reboot the computer for changes to take effect.

Additional Useful Tools

Using Portable SuperAntiSpyware:
To thoroughly remove the virus, it is best to do a separate scan of another security program so that other infected files not detected by anti-virus application can be get rid as well. Click here to download and run SAS Portable Scanner.

Technical Details and Additional Information:

Malicious Files Added by MalwareMonitor
%UserProfile%\Desktop\MalwareMonitor.lnk
%UserProfile%\Start Menu\Programs\MalwareMonitor\MalwareMonitor.lnk
%UserProfile%\Start Menu\Programs\MalwareMonitor\Uninstall.lnk
%ProgramFiles%\MalwareMonitor\MalwareMonitor.exe
%ProgramFiles%\MalwareMonitor\MalwareMonitor.lic
%ProgramFiles%\MalwareMonitor\MalwareMonitor0.dll
%ProgramFiles%\MalwareMonitor\MalwareMonitor0.mm
%ProgramFiles%\MalwareMonitor\MalwareMonitor1.dll
%ProgramFiles%\MalwareMonitor\MalwareMonitor1.mm
%ProgramFiles%\MalwareMonitor\MalwareMonitor3.dll
%ProgramFiles%\MalwareMonitor\Uninstall.exe

File Location for Windows Versions:

• %UserProfile% for Vista/7 user is C:\Users\<Current User> for Windows Vista/7, for Windows XP/2000 this is C:\Documents and Settings\<Current User>.

MalwareMonitor Registry Entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run\”MalwareMonitor” = “C:\Program Files\MalwareMonitor\MalwareMonitor.exe”