Home / Spyware Encyclopedia / Fake Anti Spyware.Antispyware PRO XP << Back

Recommendation to Automatically remove Fake Anti Spyware.Antispyware PRO XP


Our products can remove Fake Anti Spyware.Antispyware PRO XP and thousands of other Virus and Spyware automatically and instantly.

Fake Anti Spyware.Antispyware PRO XP Details


  • Category Fake Anti Spyware
  • Discovered 5/3/2008 9:51:00 AM
  • Modified 6/1/2020 1:49:46 PM
  • Threat Level Critical
  • Category Description
    These are programs which look like any legitimate program but usually download without users permission, entice users into buying them by showing fake results to improve users PC performance. They may also download spyware and other unwanted programs.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
960932.dll 23040 1.0.0.280bc62003e83c933d234888d98f85146 
SETUP_110053_3_.EXE 90624  c1a39c12375f2f4dc4d210845ed41f83 
RED-CODEC.V.1.000.EXE 157170  b6945d15814b55c965b5fd9a71590f0f 
SYSRAGFCHQSA.EXE 40999  a109546e980825fbf0b9f209eeb79a91 
setup_1_2_.exe 95232  789126cba14911e1944324c95eb0b048 
cpuserv.dll 5120  5f1667f0bb22353a396b965291d13eac 
cpuserv.dll 5120  117d1ac1072af5ac25abc49e10c5a956 
ASPROXP.EXE 900096  02f7b87d2bc22647d11cb0acdb16a353 
cpuserv.dll 5120  65289ec87e571a5f9d0fc4f2bc6f06a7 
syst.exe 386  67ca838b8b8bfa64749c40f6106ece02 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Run\\"s9201"\"%DAS.AU.APP DATA%\\Software Licensors\Antispyware PRO XP\asproxp.exe" /autorun"
..\Software\SOFTWARE LICENSORS\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Run\\"%WIN.SYS32%\KDQHG.EXE"\"%WIN.SYS32%\KDQHG.EXE"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"S9201"\""%DAS.AU.APP DATA%\SOFTWARE LICENSORS\ANTISPYWARE PRO XP\ASPROXP.EXE" /AUTORUN"
..\Software\Microsoft\Windows\CurrentVersion\\"KDQHG.EXE"
..\Software\Classes\ZIP.PLUGIN\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Run\ \"{3BCF8450-D134-427E-AE9C-2A42CE8215CC}"\""%DAS.AU.DESKTOP%\SAMPLE\SYSRAGFCHQSA.EXE""
..\Software\Classes\Clsid\{EEE17712-987E-4424-A00C-9DA0BC4E2078}\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE17712-987E-4424-A00C-9DA0BC4E2078}\(Default)
..\Software\gimmeporn\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware


Useful Links

Copyright © 2022 Max Secure Software. All rights reserved.