AntiSpyStorm 2008 Description

AntiSpyStorm 2008, AntiSpyStorm2008 or AntiSpyStorm, is a rogue anti-spyware program. AntiSpyStorm 2008 may install in the user’s computer system by a Trojan (Zlob or Vundo) or the user may have downloaded it from a malicious website. Once Zlob is installed, it will bombard the user with fake popups and system alert notifications stating that the user’s computer system is infected with spyware.

If the user is persuaded into clicking on any of these messages, AntiSpyStorm 2008 may launch its fake system scan trial. After the rogue system scan is completed, AntiSpyStorm 2008 will issue a fake scan result informing the user about the numerous infections found in the computer system. AntiSpyStorm 2008 will then offer its full version to remove the supposed spyware infections.

AntiSpyStorm 2008’s full version of the program is sold at its own website, AntispyStorm2008.com, for $49.95. AntiSpyStorm 2008 may launch on every Windows startup.

Type: Rogue AntiSpyware Programs

Automatic Detection of AntiSpyStorm 2008

AntiSpyStorm 2008 has typically the following processes in memory:

• c:\Program Files\AntispyStorm\parser.exe
• c:\Program Files\AntispyStorm\as_ie_monitor.dll
• c:\Program Files\AntispyStorm\AntispyStorm.exe
• c:\Program Files\AntispyStorm\mdReg.dll
• %UserProfile%\Desktop\vbzlib1.dll
• c:\Program Files\AntispyStorm\uninstall.exe

AntiSpyStorm 2008 creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\AntiSpyware
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “AntispyStorm”
• HKEY_LOCAL_MACHINE\SOFTWARE\AntispyStorm
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{89AD69EF-A3CD-4A2F-9D65-7D04247B72E3}
• HKEY_CLASSES_ROOT\as_ie_monitor.ie_monitor
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntispyStorm
• HKEY_CLASSES_ROOT\CLSID\{89AD69EF-A3CD-4A2F-9D65-7D04247B72E3}

Important Article Disclaimer