PCBugSquad

AntiSpyCheck is a rogue anti-spyware program installed through the Zlob Trojan.  The Zlob Trojan is an infection which pretends to be a program required to watch a video online.  When you install it, though, it instead installs AntiSpyCheck on to your computer.

AntiSpyCheck works just like all of the rest.  It scans your computer, displays fake findings, and then asks you to purchase it before you can remove anything.  To make matters worse, it’s constant registration requests can bring your computer to a crawl.

It is advised that you use Spyware Doctor to scan your computer for this infection so that your computer is not only clean of infection, but running better.

Automatic Removal Method

We recommend that you install Spyware Doctor from PCTools in order to remove AntiSpyCheck from your computer. Spyware Doctor has an incredible track record for removing and detecting the latest malware.

Download Spyware Doctor to scan your computer for free

Manual Removal Instructions

End these processes:

Learn how to end processes

AntiSpyCheck.exe

Delete these files:
Lean how to remove files

<userprofile>\Start Menu\Programs\AntiSpyCheck 2.1.0
c:\Program Files\AntiSpyCheck
<userprofile>\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyCheck 2.1.0.lnk
<userprofile>\Desktop\AntiSpyCheck 2.1.0.lnk
<userprofile>\Local Settings\Temp\~DF6B1B.tmp
<userprofile>\Start Menu\AntiSpyCheck 2.1.0.lnk
<userprofile>\Start Menu\Programs\AntiSpyCheck 2.1.0\AntiSpyCheck 2.1.0.lnk
c:\Program Files\AntiSpyCheck\AntiSpyCheck.exe
c:\Program Files\AntiSpyCheck\IEWarning.dll
c:\Program Files\AntiSpyCheck\uninst.exe

Remove these Registry keys:

Learn how to remove Windows Registry entries

Warning: Editing the Windows Registry incorrectly can cause problems with your computer that may cause it not to operate correctly.  Please edit the Registry only if you know what you are doing.  Otherwise, please use the automated removal method above.

HKEY_CURRENT_USER\Software\AntiSpyCheck
HKEY_CURRENT_USER\Software\AntiSpyCheck\Update
HKEY_CLASSES_ROOT\CLSID\{56FA7933-DC3E-403b-8D47-BB5E3F345A21}
HKEY_CLASSES_ROOT\CLSID\{D2608046-DD09-A225-01BF-70C1EDD8B2E8}
HKEY_CLASSES_ROOT\IEWarning.WarningBHO
HKEY_CLASSES_ROOT\IEWarning.WarningBHO.1
HKEY_CLASSES_ROOT\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}
HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKEY_CLASSES_ROOT\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiSpyCheck.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56FA7933-DC3E-403b-8D47-BB5E3F345A21}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiSpyCheck
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run => AntiSpyCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run => AntiSpyCheck 2.1.0

This entry was posted on Thursday, July 17th, 2008 at 1:54 pm and is filed under Malware Removal Guide, Rogue Anti-Spyware. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.