Home / Spyware Encyclopedia / Fake Anti Spyware.MicroAntivirus
 Fake Anti Spyware.MicroAntivirus Technical Details
Category Fake Anti Spyware
Discovered 2/4/2006 11:08:00 AM
Modified 12/15/2009 3:55:31 PM
Threat Level Critical
Category Description

These are programs which look like any legitimate program but usually download without users permission, entice users into buying them by showing fake results to improve users PC performance. They may also download spyware and other unwanted programs.
Notice
Summary

The following http urls were started:
•freeupd2.pcprivacycleaner.com/?proto=1&ac=1846FCDD-BEE0-4EDD-93BF-F849A1A4B939&abbr=3...
•instlog.pcprivacycleaner.com/?action=18&a=ippuamg&l=pcpc_10&f=keyin&p=scns_10&addt=bX...
•instlog.pcprivacycleaner.com/?action=38&a=ippuamg&l=pcpc_10&f=keyin&p=scns_10&addt=bX...
The hosts file was updated with the following url-to-ip mappings: NA
The following internet connection was established:
92.62.100.64 : 80
208.88.53.47 : 80
72.55.165.237 : 80

The following Files were created:

NameVersionPublisherSignature (MD5)File Size (in KB)
..\temp\pcpc_setup_free.exe1.0.22.3PCPRIVACYCLEANER INC.a249d45c2f860c43af48f510e9fb8810934864
..\antispyware 2008.exe1.0.0.1Antispyware 2008 Software366264252c8e20a10ed95c597a8d76dd421888
..\DRVSYSVTS.EXE  d5f3eb7de0195622856f0f573c7656e525600
..\AWTTRSMD.DLL  2abe300e0db87630f058a1ac77acd300 
..\MICROANTIVIRUS\MICROAV1.DAT   33872
..\MICROANTIVIRUS\MICROAV0.DAT   410880
..\24006.EXE  be72134a647af958026e38d9ba62ca14 
..\MICROAV\MICROAV1.DAT   33868
..\MICROAV\MICROAV0.DAT   410880
..\DTSEQRXK.DLL  8df55cb1f55c6fec00be22e44a25b93d 
..\MGXFEBSQ.DLL   233472
..\DTSEQRXK.DLL   319488
..\MQGLDFVO.EXE  3d8c30f99663d210048c4be203bf1bf8 
..\MSX\MSX1.DAT   33868
..\MSXSETUP.EXE  5c439d4ca92df9a480b0eee887bd18b7351285
..\MSX\MSX.EXE1.0.0.1 b4aeebd4ed770bf09b9baa8cc6c587e0421888
..\SXFIEORJVI.EXE  d3aba3753e0c16e91a511598c66844b664896
..\XRUN.EXE  b3843e2ff9049568d81a67ec22847657149556
..\antispyware 2008.exe  366264252c8e20a10ed95c597a8d76dd 
..\altcmd\altcmd32.dll1.0.0.1  184320
..\spoolvs.exe  b0ef0a932b928ebd4c8d6387bb63426d 

The following Registry Entries were created:

•..\Software\Microsoft\Windows\CurrentVersion\POLICIES\EXPLORER\"NOCONTROLPANEL"
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"PRINTER"\"%WIN.SYS32%\PRINTER.EXE"
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"GSCNS300"\"%DAS.AU.APP DATA%\PCPRIV.EXE"
•..\Software\GSCNS300
•..\Software\Classes\FQBEWLNA.TOOLBAR.1
•..\Software\Classes\FQBEWLNA.BXML
•..\Software\Classes\Clsid\{5AEE532C-7C2F-4E5C-A044-096846CB9490}
•..\Software\Classes\Interface\{A21EA590-9F50-4200-99E9-F10973716AC0}
•..\Software\Classes\Interface\{920918D3-E78A-466C-91F3-0CA5B1340823}
•..\Software\Classes\Interface\{02D99F20-DED5-4B1E-8824-453988CD87A2}
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"ANTIVIRUS"\"%PF%\MICROANTIVIRUS\MICROAV.EXE"
•..\Software\MICROAV
•..\Software\{5222008a-dd62-49c7-a735-7bd18ecc7350}
•..\Software\virusremover2008
•..\Software\pcprivacycleaner
•..\Software\{65de966d-11d1-4bb1-bf7e-b8a273514daf}
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"spoolsv"\"%win.sys32%\spoolvs.exe"
•..\System\CurrentControlSet\Services\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\DOMAINPROFILE\AUTHORIZEDAPPLICATIONS\LIST\"%DAS.AU.APP DATA%\MCRUPDATE.EXE"\"%DAS.AU.APP DATA%\MCRUPDATE.EXE:*:ENABLED:@XPSP2RES.DLL,-22019"
•..\Software\Classes\HZFEL1.BHOAPP.1
•..\Software\Classes\HZFEL1.BHOAPP
•..\Software\Classes\Clsid\{2A8D06B4-1B40-009F-E531-629A59080F43}
•..\Software\Microsoft\Windows NT\CurrentVersion\Windows\ \"APPINIT_DLLS"\"%WIN.SYS32%\WOWFX.DLL"
•..\Software\Classes\Interface\{967a494a-6aec-4555-9caf-fa6eb00acf91}
Recommendation to remove Fake Anti Spyware.MicroAntivirus

Spyware Detector can remove Fake Anti Spyware.MicroAntivirus, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.
Download Spyware Detector and Scan for FREE
 
Search Threats
Customer Service Rating by LivePerson