Home Rogue Websites Antispylist.com

Antispylist.com

Posted: April 7, 2009

Antispylist.com is host to the notorious fake spyware remover called MS Antispyware 2009, which seems to be getting pretty active these days. Just like most hijackers, Antispylist.com may redirect your default homepage to its website. This may be caused by a Trojan infection that alters your browser settings and thus diverting your web-surfing activities to Antispylist.com. You may also find yourself redirected to the Antispylist.com domain by clicking a link on a dubious alert message that appears from nowhere and states you have security threats.

Regardless of how you get to the Antispylist.com web page, you will be greeted with a free trial version of MS Antispyware 2009, which - upon installation - will flood your PC with false pop-up alerts and misleading scans that claim your computer is riddled with parasites that need to be urgently removed. Of course, all of this is nothing but a hoax, in order to scare you into purchasing the full version of MS Antispyware 2009, that does nothing for your computer, except perhaps slow down its performance and degrade internet connection speed. Since Antispylist.com is so malicious and potential contagious, remove this hijacker immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Application Data\CrucialSoft Ltd
    2 %Documents and Settings%\All Users\Application Data\CrucialSoft Ltd\MS AntiSpyware 2009
    3 %Documents and Settings%\All Users\Application Data\CrucialSoft Ltd\MS AntiSpyware 2009\BASE
    4 %Documents and Settings%\All Users\Application Data\CrucialSoft Ltd\MS AntiSpyware 2009\DELETED
    5 %Documents and Settings%\All Users\Application Data\CrucialSoft Ltd\MS AntiSpyware 2009\LOG
    6 %Documents and Settings%\All Users\Application Data\CrucialSoft Ltd\MS AntiSpyware 2009\LOG\20081214155256795.log
    7 %Documents and Settings%\All Users\Application Data\CrucialSoft Ltd\MS AntiSpyware 2009\msas2009.exe
    8 %Documents and Settings%\All Users\Application Data\CrucialSoft Ltd\MS AntiSpyware 2009\SAVED
    9 %UserProfile%\Start Menu\Programs\MS AntiSpyware 2009
    10 %UserProfile%\Start Menu\Programs\MS AntiSpyware 2009\MS AntiSpyware 2009.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\CrucialSoft LtdHKEY_CURRENT_USER\Software\CrucialSoft Ltd\MS AntiSpyware 2009HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run gMS AntiSpyware 2009HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}MS AntiSpyware 2009 5.7
Loading...