Home Malware Programs Rogue Anti-Spyware Programs TopAntiSpyware

TopAntiSpyware

Posted: March 28, 2006

TopAntiSpyware (also referred to as Top AntiSpyware) is a fake spyware remover that is typically installed onto your computer as a trial version, and usually manually. Once active, Top AntiSpyware generates misleading security alerts and fake system scans that report fabricated infection results, in an attempt to fool you into thinking that your PC is infected. You are then prompted to purchase and install the full version of Top AntiSpyware in order to combat these non-existent threats.persuade purchase of a harmful rogue anti-spyware program.

It is very important that you detect and remove TopAntiSpyware to prevent it from performing other malicious actions on your computer. Changing your desktop background could be only the beginning to other harmful actions carried out by TopAntiSpyware.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 hookdump.exe
    2 r.exe
    3 runsrv32.dll
    4 runsrv32.exe
    5 spoolsrv32.dll
    6 spoolsrv32.exe
    7 srpcsrv32.dll
    8 txfdb.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERControlPanelDesktopPatternHKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerDesktopComponents1HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunIntelsystemtool=%System%hookdump.exeHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOncesrv32spoolservice=%System%HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOncesrv32spoolservice=%System%spoolsrv32.exeHKEY_LOCAL_MACHINESOFTWAREAntivirusGoldHKEY_LOCAL_MACHINESOFTWAREMicrosoftJavaVMSystemPropertiescom.ms.applet.enable.install=trueHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunOncesrv32spoolservice=%System%HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunOncesrv32spoolservice=%System%spoolsrv32.exeunsrv32.exe
Loading...