AntiSpyWareSetup.exe

AntiSpyWareSetup.exe Description

AntiSpyWareSetup.exe is an executable file which is identified as a threat. AntiSpyWareSetup.exe is a harmful file, which is associated with malicious security programs. AntiSpyWareSetup.exe is able to download and install unsafe applications. Antispyware-Setup.exe poses as a legitimate file in Windows operating system and infects it stealthily. It is strongly recommended to remove Antispyware-Setup.exe from your PC system immediately after detection.

Technical Information

File System Details

AntiSpyWareSetup.exe creates the following file(s):
# File Name Detection Count
1 C:\WINDOWS\System32\Antispyware Setup.exe N/A
2 C:\Temp\ N/A
3 C:\Program Files\Common Files N/A

Registry Details

AntiSpyWareSetup.exe creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download\"RunInvalidSignatures" = "1"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{94D5AF0F-E6EE-4A75-BE31-9C9C9A87AD45}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments"SaveZoneInformation" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" ="1"
HKEY_CURRENT_USER\Software\Microsoft\Installer\UpgradeCodes\713B41478A517224DA270783641C4644
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:6522"
HKEY_CURRENT_USER\Software\Microsoft\Installer\Features\F0FA5D49EE6E57A4EB13C9C9A978DA54
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_CURRENT_USER\Software\wnxmal