Home Malware Programs Rogue Anti-Spyware Programs PowerAntiSpy


Posted: August 7, 2008

PowerAntiSpy, also known as Power AntiSpy, is a rogue anti-spyware program that installs in your computer system with the help of Trojan Zlob or other malicious methods. You may have also downloaded PowerAntiSpy from a rogue website thinking it would remove your spyware threats. Once PowerAntiSpy's trial version is installed, it will run a fake system scan to generate a list of spyware results that are supposedly found in your system. Along with this scan, popups and fake system alert messages may appear to "inform" you about your supposed infections.

If you click on any of these messages, you'll be redirected to PowerAntiSpy's rogue website (PowerAntiSpy.com) to further download Power AntiSpy's licensed version. PowerAntiSpy.com will promote Power AntiSpy as a legit software, do not be tricked by its malicious tactics.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 c:\Documents and Settings\All Users\Start Menu\Programs\PowerAntiSpy
    2 c:\Documents and Settings\All Users\Start Menu\Programs\PowerAntiSpy\Register PowerAntiSpy.lnk
    3 c:\Documents and Settings\All Users\Start Menu\Programs\PowerAntiSpy\Start PowerAntiSpy.lnk
    4 c:\Documents and Settings\All Users\Start Menu\Programs\PowerAntiSpy\Uninstall PowerAntiSpy.lnk
    5 c:\Documents and Settings\All Users\Start Menu\Programs\Startup\.protected
    6 c:\Documents and Settings\BC\Application Data\PowerAntiSpy
    7 c:\Documents and Settings\BC\Application Data\PowerAntiSpy\config.xml
    8 c:\Documents and Settings\BC\Application Data\PowerAntiSpy\logs
    9 c:\Documents and Settings\BC\Application Data\PowerAntiSpy\logs\1215368563.log
    10 c:\Documents and Settings\BC\Application Data\PowerAntiSpy\Sites.bl
    11 c:\Documents and Settings\BC\Application Data\PowerAntiSpy\startup
    12 c:\Documents and Settings\BC\Start Menu\Programs\Startup\.protected
    13 c:\Program Files\PowerAntiSpy\ASpyPopUpBlk.dll
    14 c:\Program Files\PowerAntiSpy\ASpyStBlk.dll
    15 c:\Program Files\PowerAntiSpy\pcantispy.pkg
    16 c:\Program Files\PowerAntiSpy\PowerAntiSpy.db
    17 c:\Program Files\PowerAntiSpy\PowerAntiSpy.exe
    18 c:\Program Files\PowerAntiSpy\program.info
    19 c:\Program Files\PowerAntiSpy\Uninstall.exe
    20 c:\WINDOWS\.protected
    21 c:\WINDOWS\system32\drivers\etc\.protected
    22 c:\WINDOWS\system32\drivers\pcantispy.sys

Registry Modifications

  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}60B244BE-559D-4269-B96E-CD264D828EC9

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to PowerAntiSpy may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.