P Antispyware 09 Description

P Antispyware 09 is a rogue anti-spyware program. Using false advertising and fake scan results, P Antispyware 09 attempts to trick the user into purchasing this software in order to protect their system from infection. Specific websites will greet the user with pop-up windows notifying them that their computer is infected. They are then persuaded to run a fake online anti-spyware scanner. This will soon be followed by numerous reports that the system is infected, accompanied by the suggestion that P Antispyware 09 be installed. Once this application has been installed, it will be configured to start automatically when Windows loads. The scan that occurs may report back fictitious results, in an attempt to intimidate the user into purchasing the counterfeit “full” version of P Antispyware 09.

Type: Rogue AntiSpyware Programs

How Can You Detect P Antispyware 09?

P Antispyware 09 Technical Report

As new P Antispyware 09 details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following P Antispyware 09 files with its MD5s were created in the system:

P Antispyware 09 has typically the following processes in memory:

• %Documents and Settings%\All Users\Application Data\pantispyware09.com
• %Program Files%\P Antispyware 09\pas.exe
• %AllUsersProfile%\Application Data\pantispyware09.com
• %Program Files%\P Antispyware 09\killtask.bat
• %Program Files%\P Antispyware 09\unins000.exe

P Antispyware 09 created the following directories, files, paths:

• %AllUsersProfile%\Start Menu\Programs\P Antispyware 09
• %AllUsersProfile%\Application Data\pantispyware09.com
• %ProgramFiles%\P Antispyware 09

P Antispyware 09 creates the following registry entries:

• HKEY_CURRENT_USER\Software\pantispyware09.com
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “P Antispyware 09″
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\P Antispyware 09_is1
• pantispyware09.com

Important Article Disclaimer