Home Malware Programs Rogue Anti-Spyware Programs Anticare

Anticare

Posted: July 8, 2010

Anticare (or Anti-Care) is a rogue antispyware program designed to con computer users into spending money. Anticare uses scare tactics to convince users that the PC is infected with malware. The system will then be bombarded by popup warnings urging the purchase of Anti-Care to remove the alleged threats. Do not become another hapless victim of cybercrime and have Anticare removed using a reliable antispyware program.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\Anticare.lnk
    2 C:\Documents and Settings\[USER]\Desktop\Anticare.lnk
    3 C:\Documents and Settings\[USER]\Desktop\anticare^2010.exe
    4 C:\Documents and Settings\[USER]\Local Settings\Temp\nsk4.tmp\stack.dll
    5 C:\Documents and Settings\[USER]\Start Menu\Anticare.lnk
    6 C:\Documents and Settings\[USER]\Start Menu\Programs\Anticare\Anticare ????.lnk
    7 C:\Program Files\Anticare\ACAutoUpdate.exe
    8 C:\Program Files\Anticare\ACEngine.dll
    9 C:\Program Files\Anticare\ACUpdateServer.dat
    10 C:\Program Files\Anticare\AntiCare.exe
    11 C:\Program Files\Anticare\conf.ini
    12 C:\Program Files\Anticare\db\addb.dat
    13 C:\Program Files\Anticare\db\adsub.dat
    14 C:\Program Files\Anticare\db\adtc.dat
    15 C:\Program Files\Anticare\db\avmon.dat
    16 C:\Program Files\Anticare\db\filter.dll
    17 C:\Program Files\Anticare\db\inter.dll
    18 C:\Program Files\Anticare\db\pwdb.dat
    19 C:\Program Files\Anticare\db\vsdb.dat
    20 C:\Program Files\Anticare\etc\ACFilterDriver.SYS
    21 C:\Program Files\Anticare\etc\acMon.exe
    22 C:\Program Files\Anticare\etc\ACmonRemote.dll
    23 C:\Program Files\Anticare\etc\acReg.exe
    24 C:\Program Files\Anticare\etc\ACreport.exe
    25 C:\Program Files\Anticare\etc\avsrv.exe
    26 C:\Program Files\Anticare\etc\avsrvc.exe
    27 C:\Program Files\Anticare\etc\avSubEngine.exe
    28 C:\Program Files\Anticare\Lang\kr.xml
    29 C:\Program Files\Anticare\partner.ini
    30 C:\Program Files\Anticare\skin\default.avs
    31 C:\Program Files\Anticare\SoACUpdateServer.dat
    32 C:\Program Files\Anticare\Uninstall.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] = ""%ProgramFiles%\Anticare\AntiCare.exe" /Scan"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}AntiCareMain] = "Anticare"
Loading...