Researchers at CA said the malicious program tries to trick users into downloading a fake spyware removal tool. Only a few differences help distinguish it from a legitimate one.