Home > Threats > SpyOnThis

What is SpyOnThis

Posted on 19 April 2008 under Rogue Programs

1. What is SpyOnThis?

It is rogue spyware removal and protection software having PC scanner (free version) and system monitor (commercial version) functions. This program is known to display fake security alerts, while practically computer is not infected. SpyOnThis starts PC scan process as soon as it has been downloaded and launched, generating found spyware report in the end, which should not be trusted as it is effusive and overfilled with pretended spyware or virus infections. After PC has been scanned user is asked to remove found spyware, and after positive choice redirection to the payment page occurs. Consider that buying licensed program version will not solve spyware problems properly.
Also known as SpyOnThis v2.0

2. SpyOnThis screen shot:

SpyOnThis

3. How to remove SpyOnThis:

  1. Internet connection might be disabled or Internet browser might be blocked by SpyOnThis, so it won't be possible to download any files to infected computer. In this case please download all files required for SpyOnThis removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove SpyOnThis download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove SpyOnThis.

  5. Restart the computer to complete SpyOnThis removal procedure.

4. SpyOnThis files:

armaccess.dll
SpyOnThis.exe, spyonthismonitor.exe, spyonthissetup_v2.0.exe

5. Hijackthis entries:

O4 - HKCU\..\Run: [SpyOnThisScanner] "C:\Program Files\SpyOnThis v2.0\SpyOnThis.exe" -m