1. Symantec/
  2. Security Response/
  3. SpywarePreventer

SpywarePreventer

Updated:
August 26, 2008 11:22:56 AM
Type:
Misleading Application
Name:
Spyware Preventer
Version:
1.0.0.1
Publisher:
www.spywarepreventer.com
Risk Impact:
Medium
Systems Affected:
Windows
Behavior
The program must be manually installed.

The program reports false or exaggerated system security threats on the computer.





The user is then prompted to pay for a full license of the application in order to remove the threats.





Installation
When the program is executed, it creates the following files:
  • %UserProfile%\Desktop\Spyware Preventer.lnk
  • %ProgramFiles%\SPP\SPP.cpl
  • %ProgramFiles%\SPP\SPP.exe
  • %ProgramFiles%\SPP\SPP.ooo
  • %ProgramFiles%\SPP\SPP1.dat
  • %System%\SPP.cpl


Next, the program creates the following registry entries so that it executes whenever Windows starts:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"Antivirus" = "C\Program Files\SPP\SPP.exe"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"Antivirus" = "C\Program Files\SPP\SPP.exe"


It also creates the following registry subkeys:
  • HKEY_CLASSES_ROOT\.key
  • HKEY_CURRENT_USER\Software\SPP
  • HKEY_CURRENT_USER\Software\Antivirus


Similar Security Risks

AntiVirus2008


Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube