Home Malware Programs Rogue Anti-Spyware Programs Antispyware Software

Antispyware Software

Posted: June 2, 2010

Antispyware Software (AntispywareSoftware) is a variant of the rogue Antispyware Soft. The corrupt program uses scare tactics to con unwary computer users to download, install and purchase the full AntiSpyware Software application. AntiSpywareSoftware displays misleading popup alerts with bogus scan results claiming fake parasites have taken over the system. AntiSpyware Software cannot detect or remove spyware or any other type of parasite. Remove AntiSpywareSoftware with an updated spyware detection tool.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\Local Settings\Application Data\tssd.exe
    2 avsoft.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Antispyware SoftwareHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" ="1"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""HKEY_CURRENT_USER\Software\avsoftHKEY_CURRENT_USER\Software\avsuiteHKEY_LOCAL_MACHINE\SOFTWARE\avsoftHKEY_LOCAL_MACHINE\SOFTWARE\avsuiteHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ""
Loading...