Anticare Description

Anticare is a fake anti-spyware application used to trick users out of their money. Anticare aka Anti-Care propagates via Trojans that can surreptitiously infiltrate systems through vulnerabilities. When inside a system, Anticare will display bogus system scanners, pop-up warnings and security alerts in order to convince a victim that his/her machine is infected. Then the victim will be prompted to purchase the “licensed” version of Anticare to remove all the detected malware threats. This is a scam; Anticare is not able to detect or remove computer threats.

Type: Rogue AntiSpyware Programs

How Can You Detect Anticare?

Anticare Removal Details

Anticare has typically the following processes in memory:

• C:\Program Files\Anticare\Uninstall.exe
• C:\Program Files\Anticare\etc\acReg.exe
• C:\Documents and Settings\[USER]\Local Settings\Temp\nsk4.tmp\stack.dll
• C:\Program Files\Anticare\etc\ACFilterDriver.SYS
• C:\Program Files\Anticare\etc\avsrvc.exe
• C:\Program Files\Anticare\AntiCare.exe
• C:\Program Files\Anticare\etc\acMon.exe
• C:\Program Files\Anticare\etc\avSubEngine.exe
• C:\Program Files\Anticare\db\filter.dll
• C:\Program Files\Anticare\etc\ACreport.exe
• C:\Program Files\Anticare\ACEngine.dll
• C:\Program Files\Anticare\db\inter.dll
• C:\Program Files\Anticare\etc\avsrv.exe
• C:\Program Files\Anticare\ACAutoUpdate.exe
• C:\Program Files\Anticare\etc\ACmonRemote.dll
• C:\Documents and Settings\[USER]\Desktop\anticare^2010.exe

Anticare creates the following files in the system:

• C:\Program Files\Anticare\db\avmon.dat
• C:\Documents and Settings\[USER]\Start Menu\Programs\Anticare\Anticare ????.lnk
• C:\Program Files\Anticare\SoACUpdateServer.dat
• C:\Program Files\Anticare\db\pwdb.dat
• C:\Documents and Settings\[USER]\Desktop\Anticare.lnk
• C:\Program Files\Anticare\db\adsub.dat
• C:\Program Files\Anticare\skin\default.avs
• C:\Program Files\Anticare\conf.ini
• C:\Program Files\Anticare\db\adtc.dat
• C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\Anticare.lnk
• C:\Program Files\Anticare\partner.ini
• C:\Program Files\Anticare\db\vsdb.dat
• C:\Program Files\Anticare\ACUpdateServer.dat
• C:\Program Files\Anticare\db\addb.dat
• C:\Program Files\Anticare\Lang\kr.xml
• C:\Documents and Settings\[USER]\Start Menu\Anticare.lnk

Anticare creates the following registry entries:

• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiCareMain] = “Anticare”
• [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] = “”%ProgramFiles%\Anticare\AntiCare.exe” /Scan”

Important Article Disclaimer