Home > Threats > AntiSpyCheck

What is AntiSpyCheck

Posted on 4 February 2008 under Rogue Programs

1. What is AntiSpyCheck?

This program (also known as AntiSpyCheck v2.1, v2.4) is known as rogue computer security software, intended to display exaggerated system security alerts in order to mislead panicked user by suggesting AntiSpyCheck as spyware removal application. After the computer has been infected, desktop image will be turned into the blue background with a warning message in the middle:

AntiSpyCheck can also be recognized by the blinking icon in the bottom right corner of the taskbar named "System Alert":

The program will be downloaded automatically. Computer scanner will start right after, which will generate a report in the end containing non-existent and fictitious PC infections. AntiSpyCheck will ask to purchase full program version for spyware/virus removal.

AntiSpyCheck alert message:

AntiSpyCheck is not recommended computer security product. Do not purchase the program as you will get no effect in return. If any signs of AntiSpyCheck existence have been noticed, do not hesitate and remove the program immediately.

Author: antispycheck.com

2. AntiSpyCheck screen shot:


3. How to remove AntiSpyCheck:

  1. Internet connection might be disabled or Internet browser might be blocked by AntiSpyCheck, so it won't be possible to download any files to infected computer. In this case please download all files required for AntiSpyCheck removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove AntiSpyCheck download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove AntiSpyCheck.

  5. Restart the computer to complete AntiSpyCheck removal procedure.

4. AntiSpyCheck files:

startupeditor.dll, messengercontrol.dll, desktopmanager.dll, msvcr71.dll, msvcp71.dll, dbghelp.dll, ascnospam.dll
* all files located under Program files\AntiSpyCheck\ directory

AntiSpyCheck.exe, asc_setup_light.exe (setup file)

5. Hijackthis entries:

O4 Entries
O4 - HKCU\..\Run: [AUTORUN_VAL] C:\Program Files\AntiSpyCheck 2.1\AntiSpyCheck 2.1.exe
O4 - HKLM\..\Run: [AntiSpyCheck 2.1] "C:\Program Files\AntiSpyCheck 2.1\AntiSpyCheck 2.1.exe"