Antispyware Pro XP

14 September 2008 1 Comment

Antispyware Pro XP is a misleading application that reports false and fabricated system security threats on computer. It is advertised as legitimate security software on various security web sites and uses a Trojan to spread itself.

Without user’s notice, Antispyware Pro XP may enter the system unexpectedly by exploiting software and security weaknesses. It may also take advantage of vulnerabilities in Internet browser to install itself as a plug-in. Once inside the computer, the malware will connect to a remote server to download additional harmful file and completes the installation of Antispyware Pro XP.

Remember that rogue software is created to deceive victims in the sole purpose of earning a profit for its author. Therefore, obtaining the licensed version of Antispyware Pro XP is a non-sense action for user who was infected with it. The best solution is to download and scan the compromised computer using only legitimate anti-malware program.

Screen Shot Image:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista

Malware Behavior
Antispyware Pro XP displays a series of fake pop-up alerts and security warnings as a way to mislead victims. Additionally, this rogue anti-virus initiates a system scan that detects a number of threats. The detection is part of fraudulent act to sell the program. In fact, if user attempts to clean the PC from threats, Antispyware Pro XP prompts for the registration:

Antispyware Pro XP evaluation version warning
Antispyware Pro XP evaluation
This version of Antispyware Pro XP is for evaluation purpose only. The removal feature is disabled. You may scan your PC to locate malware threats.
Please purchase a license to remove identified threats.

Added Registry Entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"s9201" = "C:\Documents and Settings\All Users\Application Data\Software Licensors\Antispyware PRO XP\asproxp.exe" /autorun
Associated Files and Folders:
C:\Documents and Settings\All Users\Application Data\services\services.dll
C:\Documents and Settings\All Users\Application Data\Software Licensors\Antispyware PRO XP\asproxp.exe
C:\Documents and Settings\All Users\Application Data\Software Licensors\Antispyware PRO XP\LOG\[YYYYMMDDTIME].log

How to Remove Antispyware Pro XP

Automatic Removal of Antispyware Pro XP using Malwarebytes' Anti-Malware

In order to completely remove the threat, it is best to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.