Home
/
Spyware Encyclopedia
/ Fake Anti Spyware.PCAntiSpy
Fake Anti Spyware.PCAntiSpy Technical Details
Category
Fake Anti Spyware
Discovered
7/14/2008 16:06:00 PM
Modified
7/15/2008 10:23:00 AM
Threat Level
Critical
Description
PC-Antispy (or PCAntispy) is a Fake Anti Spyware program. PC-Antispy displays misleading result after scanning PC by it. PC-Antispy displays fake warning messages about fake infection with dangerous spyware. PC-Antispy may attempt to trick user into purchasing the commercial version of their program.
Summary
The hosts file was updated with the following url-to-ip mappings :
n/a
The following http urls were started :
pc-antispy.com
Generated smtp traffic :
n/a
There was a new connection established with a remote IRC Server :
n/a
The Following Hidden Entries Created :
n/a
The following internet connection was established:
n/a
Processes
Pc-Antispy.exe
Drivers
N/A
Folders created
%PFDIR%\PC-Antispy
%COMMON_PROGRAMS%\PC-Antispy
%APPDATA%\PC-Antispy
%APPDATA%\PC-Antispy\logs
Browsed Sites
http://pc-antispy.com/
When the Fake Anti Spyware is executed, it creates the following files:
Name
Version
Publisher
Signature (MD5)
File Size (in Bytes)
..\pc-antispy\config.xml
3d6a1c4bd7818dd404bd9539f4e544a5
1350
..\pc-antispy\aspypopupblk.dll
34f1b3a22a4f7dcb60f05f8e32ab011f
57344
..\pc-antispy\aspystblk.dll
485b725833d3765784202e304cb6fc93
155648
..\pc-antispy\pc-antispy.exe
1.4.125.0
PC-Antispy.com
9b893086bb564502f957d92f182c0478
10895360
..\pcantispy_installer_eng.exe
ce3edd464deaa6f7c9299a78e94dd3d1
279552
..\drivers\pcantispy.sys
385689b3721fcdd08be430345ce46974
25600
When the Fake Anti Spyware is executed, it creates the following Registry entries:
•
..\software\pc-antispy
•
..\software\classes\clsid\{60b244be-559d-4269-b96e-cd264d828ec9}
•
..\software\microsoft\windows\currentversion\run\"pc-antispy"
•
..\software\microsoft\windows\currentversion\uninstall\pc-antispy
•
..\software\pc-antispy
Snapshot
Recommendation to remove Fake Anti Spyware.PCAntiSpy
Spyware Detector can remove Fake Anti Spyware.PCAntiSpy, and thousands of other Spyware definitions, automatically and instantly.
Click here
to download Spyware Detector and scan for free.
Personalized e-Mail support
by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.
Speed up your computer
and increase browsing performance by deleting Spyware & Adware
Enjoy continuous protection and security with
frequent spyware definition updates
so you never have to worry about new threats and outdated software.
Surf the web with confidence
knowing your online activities aren't being tracked, and your
confidential data is secure
from prying eyes.
Search Threats
Testimonials
Read More
Information Desk
Spyware & Adware Categories we scan
List of Spyware &
Adware we remove
Submit a Threat
Submit a threat to be reviewed by our research team
Submit a Threat
Home
|
About Us
|
Purchase
|
Contact Us
|
FAQ
|
Privacy Policy