AntiSpyCheck

Posted by Emma Adrian in Blog Latest Parasite Threats, Latest Spyware Threats, Recent Articles, Top Parasite Threats, Top Spyware Threats on March 11th, 2009 | Leave a comment
TAGS: , ,

What is AntiSpyCheck?
AntiSpyCheck is a rogue security application that alleges to be a spyware remover, popup blocker and spam filter, but is actually another fake tool trying to gain your money. AntiSpyCheck may download and install without your knowledge or consent through a Trojan called Zlob, or users can download directly from AntiSpyCheck.com. Once in your system, AntiSpyCheck will flood you with fake notifications and popups about fictitious threats, turning user’s Internet browsing into an annoying activity, so as to scare you into buying its full version.

Do you have AntiSpyCheck?
If you have enough time and expertise, you can search your computer for AntiSpyCheck manually. However, it might take hours to find out all files of AntiSpyCheck, and it is possible that AntiSpyCheck will appear after rebooting, for its hidden files may still be there.

Download automatic scanner for AntiSpyCheck
Spyware Cease – the technology-oriented security protection that provides a risk-free computing environment for your home and office – with detection, removal and guard in one intuitive and straight-forward interface. Only Spyware Cease gives you individual fix against the most dangerous spyware problems.

Manual AntiSpyCheck removal instructions
WARNING: The manually removal method is for advanced users. AntiSpyCheck manually removal can be difficult and time-consuming. There is no guarantee that AntiSpyCheck can be completely removed, for there are hundreds of files generated when AntiSpyCheck installed on your system. Make sure to back up your computer in case that you make any mistakes and your system does not work.

Follow the instruction below for AntiSpyCheck removal manually:

Navigate and stop AntiSpyCheck processes:
ad-protect.exe
AntiSpyCheck.exe

Navigate and Unregister AntiSpyCheck DLL Files:
spamdet.dll

Navigate and Remove AntiSpyCheck registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ad-protect.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\spamdet.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{9DA1990B-9BCA-4c80-AEFB-11A40FA849F9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{C628512D-A058-4BD4-B47B-B036F45FA02B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99A753C6-E429-46BD-989E-DD4A21CD059D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BBBD3E11-D201-46C9-8471-091D33159287}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2608046-DD09-A225-01BF-70C1EDD8B2E8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2C1986A-FBEC-4472-AABF-6D42F08DBC8E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D7ABE914-B8CF-4602-9145-6BDAAEDA21AA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3210E86-46A8-5973-963F-0EF4CF226A0C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{214345B8-BB69-498D-A168-29F58F15D806}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CF231820-9904-4A37-B5B0-C87EF6F6CC82}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D2C1986A-FBEC-4472-AABF-6D42F08DBC8E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F51BC478-D997-4C56-988D-79D9EEAAD1EC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FD4DCB8B-C33A-4E70-A351-6FAB7E1071A4}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{32BD20FD-41FD-47FB-9BC9-28DCBD7D55D7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{5AA883DB-7CFD-4737-B3C3-C671595ECCE5}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Addin
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Addin.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Server
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Server.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spamdet.SpamDetector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spamdet.SpamDetector.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiSpyCheck.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiSpyCheck
HKEY_LOCAL_MACHINE\SOFTWARE\AntiSpyCheck
HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\Addins\Ad-Protect.Addin.1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\AntiSpyCheck

Navigate and Delete AntiSpyCheck files:
ad-protect.exe
AntiSpyCheck.exe
spamdet.dll

What are the symptoms of AntiSpyCheck?

  • AntiSpyCheck may download and install without your knowledge or consent through a Trojan
  • AntiSpyCheck may display fake notifications and popups
  • AntiSpyCheck may turn user’s Internet browsing into an annoying activity
  • AntiSpyCheck may cause a system slowdown
  • AntiSpyCheck may decrease system performance

How do I keep away from AntiSpyCheck?
Once you have cleaned up AntiSpyCheck, the most important point to prevent AntiSpyCheck and future malicious programs from reverting is to stay suspicious of spam E-mail attachment and unknown websites. Here are several ways in which you can help protect your computer against AntiSpyCheck and other malware:

  • Use a computer firewall
  • Confirm that you have downloaded all the latest critical security updates
  • Adjust Internet Explorer web browser’s security settings
  • Download and install anti-spyware protection, such as, Spyware Cease
  • Surf sites and download programs from the web sites you trust

What is Rogue AntiSpyware Program?
AntiSpyCheck is a type of Rogue AntiSpyware Program.

Rogue Anti-spyware Software is the software that uses malware to advise or install itself through other malicious viruses or security hole without your permission. Rogue software usually pops up fake system message such as “Warning, your computer is infected! Click here to scan your computer now!” Most of the time, when clicking the “OK” button on the dialog tab, users will be directed to an unknown website that may download more spyware threats. Sometimes, even clicking the close button on the top right may lead to the installation of the rogue software, for the button is actually a link.

With the purpose to trick innocent users into the action of paying, rogue software usually counterfeits exaggerated and fake system scanning results and scare users to pay for the removal of the never-existed spyware infections. In fact, the threat is the rogue software itself. Most of them come with a bundle of very harmful spyware programs that hidden in the files themselves.