Home Malware Programs Rogue Anti-Spyware Programs Antispy

Antispy

Posted: March 28, 2006

AntiSpy is a rogue anti-spyware application that pretends to find spyware and other threats on your PC. After delivering information, wich contain huge amounts of false positives, AntiSpy will try to get you to purchase a registration key; – this is completely unnecessary, since AntiSpy has no anti-malware capabilities and will harm your PC if you allow AntiSpy to remain undeleted. In addition to the poor information AntiSpy gives regarding infections, AntiSpy will also create pop-ups and run automatically without any disabling option. AntiSpy may also hijack your web browser or prevent you from using applications. Removing AntiSpy and anything related to AntiSpy through the application of good anti-malware programs is your best bet for regaining a safe PC environment.

AntiSpy Attacks Your PC from Multiple Sources

AntiSpy is a new spin on the old rogue anti-virus program scam - the name is a fresh one, but the attacks and other harmful behavior used by AntiSpy are all the same old. AntiSpy is known to be related to such threats as Antispy 2011 and AntiSpy2011Setup.exe. Other potential affiliates of the AntiSpy scam include AntiSpy Golden, PC AntiSpy and AntiSpy Safeguard.

Getting infected by AntiSpy will usually occur when you unwittingly visit a dangerous website; known AntiSpy-promoting websites include protecttunexpscanvirus.com, htmlprotectwinxpscan.com and copyprotectwinxpscan.com. These websites have been observed to change very rapidly, however, and you should take care around any website with a similar domain name.

The 'Anti' to Your PC, but Not So Much to Spyware

Major problems related to AntiSpy include:

  • Startup entries added to your Registry without your consent. These entries let AntiSpy run whenever you start Windows and can also be used to enable further attacks, as noted below.
  • AntiSpy will use its position in your startup routine to show you fake system scans indicative of high levels of infection. Although AntiSpy indicates that AntiSpy can successfully remove these problems after you purchase AntiSpy full version, AntiSpy can neither detect nor remove malware threats like viruses or trojans.
  • Infections related to AntiSpy are also known to create a variety of fake pop-ups that also try to convince you that your PC has a wide range of problems. These pop-ups may imitate the look of a standard Windows security alert, fooling the PC user into thinking that these fake warnings are from the operating system. These alerts begin with text like the following:

    'Windows Security Alert
    To help protect your computer, Windows Web Security have detected Trojans and ready to remove them.'

  • AntiSpy may hijack your web browser to keep you away from anti-malware and security-based websites as well as redirecting you to harmful sites. You may find that your homepage has been changed or that search results take you to dangerous websites.
  • Application usage on your part may be restricted to prevent you from deleting AntiSpy with the help of anti-malware scanners and similar tools. These applications aren't necessarily damaged, but you may need to stop AntiSpy from running before you can access them.

Removing AntiSpy is no different from removing any other rogue security program and only requires standard anti-malware procedures. Switching to Safe Mode or a similar and alternative system booting option will let you run Windows without AntiSpy running along with it. Afterwards, the use of high-quality anti-malware software can delete AntiSpy and let you get back to life as usual. Be sure your software is updated before you use it, since AntiSpy is relatively new as of April 2011 and may evade outdated scanners.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 _antispy.exe
    2 securitytipps.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunantispy=%WINDOWS%Dialer\_antispy.exe

Related Posts

Loading...