Home Malware Programs Rogue Anti-Spyware Programs Spycheck Anti-Spyware 2010

Spycheck Anti-Spyware 2010

Posted: June 15, 2010

Spycheck Anti-Spyware 2010 is a rogue antispyware program designed to con computer users into spending money. Spycheck Anti-Spyware 2010 uses scare tactics to convince users that the PC is infected with malware. The system will then be bombarded by popup warnings urging the purchase of Spycheck Anti-Spyware 2010 to remove the alleged threats. Do not become another hapless victim of cybercrime and have Spycheck Anti-Spyware 2010 removed using a reliable antispyware program.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 C:\Documents and Settings\All Users\Start Menu\Programs\Spycheck\Spycheck AntiSpyware\NewShortcut1.lnk
    2 C:\Documents and Settings\{username}\My Documents\Spycheck\Spycheck AntiSpyware\fasdata1.dat
    3 C:\Documents and Settings\{username}\My Documents\Spycheck\Spycheck AntiSpyware\fasdata2.dat
    4 C:\Documents and Settings\{username}\My Documents\Spycheck\Spycheck AntiSpyware\fasdata3.dat
    5 C:\Documents and Settings\{username}\My Documents\Spycheck\Spycheck AntiSpyware\fasdata4.dat
    6 C:\Documents and Settings\{username}\My Documents\Spycheck\Spycheck AntiSpyware\fasdata5.dat
    7 C:\Documents and Settings\{username}\My Documents\Spycheck\Spycheck AntiSpyware\fasdata6.dat
    8 C:\Documents and Settings\{username}\My Documents\Spycheck\Spycheck AntiSpyware\fasdata7.dat
    9 C:\Documents and Settings\{username}\My Documents\Spycheck\Spycheck AntiSpyware\fasdata8.dat
    10 C:\Documents and Settings\{username}\My Documents\Spycheck\Spycheck AntiSpyware\lastscan.txt
    11 C:\Documents and Settings\{username}\My Documents\Spycheck\Spycheck AntiSpyware\licencia.txt
    12 C:\Documents and Settings\{username}\My Documents\Spycheck\Spycheck AntiSpyware\spycheck.exe
    13 C:\Documents and Settings\{username}\My Documents\Spycheck\Spycheck AntiSpyware\versiondb.txt
    14 C:\WINDOWS\Installer\4ccf8.msi
    15 C:\WINDOWS\Installer\{691D8246-53FF-46F9-867B-C6D323F3CB6C}\ARPPRODUCTICON.exe
    16 C:\WINDOWS\Installer\{691D8246-53FF-46F9-867BC6D323F3CB6C}\NewShortcut1_221906E94E934D338020F88956C574D7.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\FoldersHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDllsHKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\Installer\Features\6428D196FF359F6468B76C3D323FBCC6HKEY_CLASSES_ROOT\Installer\Products\6428D196FF359F6468B76C3D323FBCC6HKEY_CLASSES_ROOT\Installer\Products\6428D196FF359F6468B76C3D323FBCC6\SourceListHKEY_CLASSES_ROOT\Installer\Products\6428D196FF359F6468B76C3D323FBCC6\SourceList\MediaHKEY_CLASSES_ROOT\Installer\Products\6428D196FF359F6468B76C3D323FBCC6\SourceList\NetHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}{691D8246-53FF-46F9-867B-C6D323F3CB6C}
Loading...