"I was using
another Antispyware to scan and
delete spyware from our company's PC. I ran the
AntispywarePlus, and found it
to be much faster in scanning. In fact it also
caught 20 more spyware's than the other Antispyware.
The user interface is very appealing. Overall an
Excellent product."
Recommendation to remove
Fake Anti Spyware AntivirusXP2008
Antivirus XP 2008 is
Rogue Security Program. It is a Fake Anti Spyware. Antivirus
XP 2008 is known to be pushed/advertised by various Trojan
horse programs. It uses aggressive and deceptive techniques
to frighten the user into purchasing the program. It gives
exaggerated report and claims of spyware found or false
positives but will not remove spyware unless the user
purchases the program.
Summary
The hosts file was
updated with the following url-to-ip mappings : n/a The following http urls were started :
www.download.windowsupdate.com Generated smtp traffic : n/a There was a new connection established with a remote IRC
Server : n/a The Following Hidden Entries Created :
hidden file: %SYSDIR%\kdssf.exe The following internet connection was established:
78.108.178.39:80(network.upl.cz)
204.16.204.56:80
85.255.117.114:80
Processes
antivirusxpinstaller.exe
Drivers
mickey32.sys ,
Xfhd24.sys
Folders
created
%PFDIR%\iSecurity
%PFDIR%\iSecurity\Antivirus XP 2008
Browsed
Sites
www.picsteen.org
When the Fake Anti Spyware is executed, it creates the
following files:
Name
Version
Publisher
Signature (MD5)
File Size (in Bytes)
..\quick launch \antivirus xp
2008.lnk
1534
..\antivirus xp 2008.lnk
1516
..\antivirus xp 2008.lnk
1522
..\desktop\antivirus xp
2008.lnk
1746
..\antivirus xp 2008.lnk
1668
When the Fake Anti Spyware is executed, it creates the
following Registry entries:
NA
Spyware Detector™Max
Secure Spyware Detector is a complete solution for individuals,
professionals and home users. The software is specially designed to
scan, detect, delete and recover spywares with an option of quick
and full scan.
