F-Secure
Tools
Rogue:W32/AntiSpyware
Summary
Dishonest antivirus or antispyware software which tricks users into buying or installing it, usually by infecting a user's computer, or by pretending the computer is infected.
Additional Details
This is the family description for the AntiSpyware family of rogue anti-malware and anti-spyware programs.
Activity
Like most rogueware families, programs from this family will scan the computer system and then display fake alert messages stating that the system has been compromised.
To deal with the supposed infections, the user is required to purchase a license to 'fully utilize' the program and/or 'enable' its disinfection functionality.
A message notifying the user of the 'infections' will also frequently pop up from the System Tray.
Installation
A typical installation from this rogueware family will add the following registry key:
Activity
Like most rogueware families, programs from this family will scan the computer system and then display fake alert messages stating that the system has been compromised.
To deal with the supposed infections, the user is required to purchase a license to 'fully utilize' the program and/or 'enable' its disinfection functionality.
A message notifying the user of the 'infections' will also frequently pop up from the System Tray.
Installation
A typical installation from this rogueware family will add the following registry key:
• HKEY_LOCAL_MACHINE\Software\[Rogueware's Name]