What is AntiSpyBoss?

Type: Spyware | Category: Rogue Programs | Discovered: 14 February 2008

It is known as fake computer security software, that is performing automatic downloads with a help of a trojan. AntiSpyBoss pretends to be PC security program against spyware/virus by imitating computer scan and generating incorrect report in the end that contains absent computer infections. To remove found threats the program will ask to purchase licensed version.

AntiSpyBoss is also known as scareware due to the fact that program alerts user with assumed warnings, purportedly the system is in danger. As AntiSpyBoss falls into rogue security software category, it is not recommended to download, install and use the program for PC defence against malware purposes. If any traces of rogue application has been detected, see our "How to remove" part to remove AntiSpyBoss.

Author: antispywareboss.com

Infected object alert, that has been dropped by AntiSpyBoss itself:

AntiSpyBoss removal tool:

Spyware Doctor (see here for the installation guide)

Screenshot:

AntiSpyBoss Entries:

The following files are created:
install.exe (setup file), asb32.exe.
The following files are silently created during AntiSpyBoss installation process in order to show user that his computer is infected. Keep in mind that created files can be under different file names!
(located at C:\WINDOWS\system32\) weekju.exe, llisoft.exe, viewzfui.exe, flcuaund.exe, regypat.exe, bhdns.dll.
(located at C:\WINDOWS\) mailavaeg.exe, qmemnvid.exe, patchkb.exe, tblgpreal.exe, encejduu.exe, chgpatch.exe.
(located at C:\Documents and Settings\[username]\Local Settings]\Temp\) regzte.exe, dblpath.exe, holdzxr.exe, wuswap.exe, conftiep.exe, zknnydel.exe, utilxxq.exe

Hijackthis Entries:

O4 - HKLM\..\Run: [AntiSpyBoss] C:\Program Files\AntiSpyBoss\asb32.exe