AntiSpyware XP 2009 - Guida alla rimozione

XP Antispyware 2009,é un rogue che si installa con l'aiuto del trojan Zlob. Il sistema é uguale a quello di altri rogue, falsi avvisi e false scansioni del sistema con successiva segnalazione di file infetti eliminabili solo comprando il programma completo.



Screen:




Files e cartelle collegati al rogue:

Codice:


c:\WINDOWS\akikuvopa.dll
c:\WINDOWS\lydumyhery.scr
c:\WINDOWS\radimup.lib
c:\WINDOWS\toli.pif
c:\WINDOWS\system32\_scui.cpl
c:\WINDOWS\system32\oxatymy.dll
c:\Documents and Settings\All Users\Application Data\boveketuz.inf
c:\Documents and Settings\All Users\Application Data\duvuja.lib
c:\Documents and Settings\All Users\Application Data\koqisybi.bat
c:\Documents and Settings\All Users\Application Data\ucozoma.reg
c:\Documents and Settings\All Users\Documents\jyxigifo._sy
c:\Documents and Settings\All Users\Documents\ysix._dl
%UserProfile%\Application Data\mepa.com
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\XP_AntiSpyware.lnk
%UserProfile%\Cookies\guwysa.dat
%UserProfile%\Cookies\sasu.bat
%UserProfile%\Desktop\XP_AntiSpyware.lnk
%UserProfile%\Local Settings\Application Data\jyxot.dl
%UserProfile%\Local Settings\Application Data\mivekely._sy
%UserProfile%\Local Settings\Application Data\pozik.vbs
%UserProfile%\Local Settings\Application Data\wosi.vbs
%UserProfile%\Start Menu\Programs\XP_AntiSpyware
c:\Program Files\Common Files\gykyr.bat
c:\Program Files\Common Files\ogumy.lib
c:\Program Files\Common Files\uwolykiw.com
c:\Program Files\XP_AntiSpyware


Chiavi di registro:

Codice:


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XP_AntiSpyware
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "XP Antispyware 2009"
HKEY_LOCAL_MACHINE\SOFTWARE\XP_Antispyware
HKEY_CURRENT_USER\Control Panel\don't load "scui.cpl"
HKEY_CURRENT_USER\Control Panel\don't load "wscui.cpl"


MalwareByte's rileva e elimina AntiSpywareXP 2009