Rogue software details: PC Antispy

PC Antispy is a rogue security application. In order to remove it, find out what files and registry entries to look for below.

Known system changes:

Files
c:\Desktop\PC-Antispy.lnk

Folders
c:\ProgramFiles\PC-Antispy
c:\CommonPrograms\doublevaccine

Registry entries
Key: HKEY_CURRENT_USER\software\pc-antispy
Key: HKEY_CLASSES_ROOT\clsid\
{60b244be-559d-4269-b96e-cd264d828ec9}
Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\
currentversion\explorer\browser helper objects\
{60b244be-559d-4269-b96e-cd264d828ec9}
Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\
currentversion\uninstall\pc-antispy
Key: HKEY_LOCAL_MACHINE\software\pc-antispy
Key: HKEY_LOCAL_MACHINE\system\controlset001\enum\
root\legacy_pcantispy
Key: HKEY_LOCAL_MACHINE\system\controlset001\
services\pcantispy
Key: HKEY_LOCAL_MACHINE\system\currentcontrolset\
enum\root\legacy_pcantispy
Key: HKEY_LOCAL_MACHINE\system\currentcontrolset\
services\pcantispy
Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\
currentversion\run
Value: pc-antispy

Source: Lavasoft Malware Lab’s Rogue Gallery.




Share this