PowerAntiSpy
PowerAntiSpy, also known as Power AntiSpy, is a rogue anti-spyware program that installs in your computer system with the help of Trojan Zlob or other malicious methods. You may have also downloaded PowerAntiSpy from a rogue website thinking it would remove your spyware threats. Once PowerAntiSpy's trial version is installed, it will run a fake system scan to generate a list of spyware results that are supposedly found in your system. Along with this scan, popups and fake system alert messages may appear to "inform" you about your supposed infections.
If you click on any of these messages, you'll be redirected to PowerAntiSpy's rogue website (PowerAntiSpy.com) to further download Power AntiSpy's licensed version. PowerAntiSpy.com will promote Power AntiSpy as a legit software, do not be tricked by its malicious tactics.
File System Modifications
- The following files were created in the system:
# File Name 1 c:\Documents and Settings\All Users\Start Menu\Programs\PowerAntiSpy 2 c:\Documents and Settings\All Users\Start Menu\Programs\PowerAntiSpy\Register PowerAntiSpy.lnk 3 c:\Documents and Settings\All Users\Start Menu\Programs\PowerAntiSpy\Start PowerAntiSpy.lnk 4 c:\Documents and Settings\All Users\Start Menu\Programs\PowerAntiSpy\Uninstall PowerAntiSpy.lnk 5 c:\Documents and Settings\All Users\Start Menu\Programs\Startup\.protected 6 c:\Documents and Settings\BC\Application Data\PowerAntiSpy 7 c:\Documents and Settings\BC\Application Data\PowerAntiSpy\config.xml 8 c:\Documents and Settings\BC\Application Data\PowerAntiSpy\logs 9 c:\Documents and Settings\BC\Application Data\PowerAntiSpy\logs\1215368563.log 10 c:\Documents and Settings\BC\Application Data\PowerAntiSpy\Sites.bl 11 c:\Documents and Settings\BC\Application Data\PowerAntiSpy\startup 12 c:\Documents and Settings\BC\Start Menu\Programs\Startup\.protected 13 c:\Program Files\PowerAntiSpy\ASpyPopUpBlk.dll 14 c:\Program Files\PowerAntiSpy\ASpyStBlk.dll 15 c:\Program Files\PowerAntiSpy\pcantispy.pkg 16 c:\Program Files\PowerAntiSpy\PowerAntiSpy.db 17 c:\Program Files\PowerAntiSpy\PowerAntiSpy.exe 18 c:\Program Files\PowerAntiSpy\program.info 19 c:\Program Files\PowerAntiSpy\Uninstall.exe 20 c:\WINDOWS\.protected 21 c:\WINDOWS\system32\drivers\etc\.protected 22 c:\WINDOWS\system32\drivers\pcantispy.sys
Registry Modifications
- The following CLSID's were detected:
HKEY..\..\{CLSID Path}60B244BE-559D-4269-B96E-CD264D828EC9
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.