007 Anti-Spyware
007 Anti-Spyware is a rogue anti-spyware application that sneaks onto a computer via security exploits and affiliated trojans. Once active, 007 Anti-Spyware launches fake system scans that display fictitious and sometimes grossly exaggerated infection results, along with falsified security alerts, all in order to intimidate the user into purchasing the commercial version of the fake spyware remover 007 Anti-Spyware.
File System Details
007 Anti-Spyware may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %SystemRoot%\RKHit.sys | |
| 2. | %ProgramFiles%\007 Anti-Spyware\LSR.lsr | |
| 3. | %UserProfile%\Start Menu\Programs\007 Anti-Spyware\007 Anti-Spyware.lnk | |
| 4. | %ProgramFiles%\007 Anti-Spyware\update | |
| 5. | %ProgramFiles%\007 Anti-Spyware\License.txt | |
| 6. | %UserProfile%\Desktop\007 Anti-Spyware.lnk | |
| 7. | %ProgramFiles%\007 Anti-Spyware | |
| 8. | %ProgramFiles%\007 Anti-Spyware\asdb.dat | |
| 9. | %ProgramFiles%\007 Anti-Spyware\RegDefend.ini | |
| 10. | %UserProfile%\Start Menu\Programs\007 Anti-Spyware\Uninstall 007 Anti-Spyware.lnk | |
| 11. | %UserProfile%\Start Menu\Programs\007 Anti-Spyware |
Registry Details
007 Anti-Spyware may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Spyware Cease
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RkHit
HKEY_CLASSES_ROOT\CLSID\{BC00E47F-1016-25DD-E208-74A12348F178}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\007 Anti-Spyware
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”007-Anti-Spyware.exe” = “%ProgramFiles%\007 Anti-Spyware\007-Anti-Spyware.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\007AntiSpyware.com
