AntiSpywareXP 2009

[Christian]

Anyone else been getting this Spyware on their computer's lately? It's infested two of my computers! So I am just wondering whether it as been effecting anyone else? It might just be me since I forgot to install AntiSpyware and Anti Virus software.......

[LOLROB]

Yes, this has affected me funny enough

[scottish]

Nope...

[Christian]

I must admit it is a quite well made. You have to install it for you to have any chance of actually removing it.

[scottish]

Erm install a real anti spyware and run it? o.0

[Christian]

Erm install a real anti spyware and run it? o.0

That is what I did but the only way it can be removed by the anti spyware program is by installing it first.

[scottish]

Thats the stupidest thing to do? If you get a virus saying click here to download a program to delete C:/ would you click it? :|

[Christian]

Thats the stupidest thing to do? If you get a virus saying click here to download a program to delete C:/ would you click it? :|

But Spyware isn't a virus and for some odd reason it is classed as Spyware when it is actually a scam. It says that your computer is full of Spyware and the only way to get rid of it is by buying the software. Read up on this bit of Spyware it's self and you'll know what I am talking about.

[scottish]

Removal instructions for AntispywareXP 2009:
1. Download Malwarebytes’ Anti-Malware (MBAM). The program designed to quickly detect, destroy and prevent malware, spyware, trojans.
2. Once downloaded, close all programs and Windows on your computer (including this one).
3. Double-click on the icon named mbam-setup.exe to install the application.
4. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.
5. If an update is found, it will download and install the latest version.
6 Once the program has loaded, select “Perform Quick Scan”, then click Scan.
7. MBAM will now start scanning your computer for malware. This process may take some time to finish,so please be patient.
8. When the scan is complete, click OK, then Show Results to view the results.
9. Make sure that everything is checked, and click Remove Selected.
10. MBAM will now delete all of the files and registry keys and add them to the quarantine.
11. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

Easy way to remove it.

AntispywareXP 2009 creates the following files:

c:\Program Files\XP_AntiSpyware
c:\Program Files\XP_AntiSpyware\AVEngn.dll
c:\Program Files\XP_AntiSpyware\comp.dat
c:\Program Files\XP_AntiSpyware\htmlayout.dll
c:\Program Files\XP_AntiSpyware\pthreadVC2.dll
c:\Program Files\XP_AntiSpyware\Uninstall.exe
c:\Program Files\XP_AntiSpyware\wscui.cpl
c:\Program Files\XP_AntiSpyware\XP_Antispyware.cfg
c:\Program Files\XP_AntiSpyware\XP_AntiSpyware.exe
c:\Program Files\XP_AntiSpyware\data
c:\Program Files\XP_AntiSpyware\data\daily.cvd
c:\Program Files\XP_AntiSpyware\Microsoft.VC80.CRT
c:\Program Files\XP_AntiSpyware\Microsoft.VC80.CRT\Microsoft. VC80.CRT.manifest
c:\Program Files\XP_AntiSpyware\Microsoft.VC80.CRT\msvcm80.dl l
c:\Program Files\XP_AntiSpyware\Microsoft.VC80.CRT\msvcp80.dl l
c:\Program Files\XP_AntiSpyware\Microsoft.VC80.CRT\msvcr80.dl l
c:\Documents and Settings\All Users\Application Data\boveketuz.inf
c:\Documents and Settings\All Users\Application Data\duvuja.lib
c:\Documents and Settings\All Users\Application Data\koqisybi.bat
c:\Documents and Settings\All Users\Application Data\ucozoma.reg
c:\Documents and Settings\All Users\Documents\jyxigifo._sy
c:\Documents and Settings\All Users\Documents\ysix._dl
c:\Documents and Settings\%Username%\Application Data\mepa.com
c:\Documents and Settings\%Username%\Application Data\Microsoft\Internet Explorer\Quick Launch\XP_AntiSpyware.lnk
c:\Documents and Settings\%Username%\Cookies\guwysa.dat
c:\Documents and Settings\%Username%\Cookies\sasu.bat
c:\Documents and Settings\%Username%\Desktop\XP_AntiSpyware.lnk
c:\Documents and Settings\%Username%\Local Settings\Application Data\jyxot.dl
c:\Documents and Settings\%Username%\Local Settings\Application Data\mivekely._sy
c:\Documents and Settings\%Username%\Local Settings\Application Data\pozik.vbs
c:\Documents and Settings\%Username%\Local Settings\Application Data\wosi.vbs
c:\Documents and Settings\%Username%\Start Menu\Programs\XP_AntiSpyware
c:\Documents and Settings\%Username%\Start Menu\Programs\XP_AntiSpyware\Uninstall.lnk
c:\Documents and Settings\%Username%\Start Menu\Programs\XP_AntiSpyware\XP_AntiSpyware.lnk
c:\Program Files\Common Files\gykyr.bat
c:\Program Files\Common Files\ogumy.lib
c:\Program Files\Common Files\uwolykiw.com
c:\WINDOWS\akikuvopa.dll
c:\WINDOWS\lydumyhery.scr
c:\WINDOWS\radimup.lib
c:\WINDOWS\toli.pif
c:\WINDOWS\system32\_scui.cpl
c:\WINDOWS\system32\oxatymy.dl

Grats on having a trojan infected computer!

[Christian]

That's exactly the thing I did but if you look at the screenshot's on the page I got it from you'll find it has to be installed. Just using Spyware removal programs to try and remove it doesn't work until the fake software is installed. It's a bit of scam software and doesn't keylog or anything else like that.