AntiSpyCheck Removal (remove AntiSpyCheck) Process

January 11, 2008 – 11:13 pm

AntiSpyCheck, or AntiSpyCheck 2.4, is a new rogue anti-spyware program, which is a form of fake malicious software engineered by Internet hackers. AntiSpyCheck was distributed via video codec. It will generate false and misleading system error messages so Internet users would purchase the software. Do NOT purchase AntiSpyCheck under any circumstances since it is not a legit anti-spyware software.

The following process will help you remove it from your system easily and safely.

AntiSpyCheck Manual Removal Process:

1. Click on the Start Menu button, then click on the Control Panel option, and then Double-click on the Add or Remove Programs icon.

2. Locate AntiSpyCheck and double-click on it to uninstall AntiSpyCheck. Follow the screen step-by-step screen instructions to complete uninstallation of AntiSpyCheck. Do not worry about this if you cannot find it in Add/Remove window. Simply skip to #5.

3. Restart the computer.

4. When it has completed uninstalling you can close Add or Remove Programs and your Control Panel.

5. Close all programs.

6. Search and delete the following infected entries in registry. If you do not know how to edit registry, click here to read more.

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Addin
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Addin.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Server
HKEY_LOCAL_MACHINE\SOFTWARE\AntiSpyCheck
HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\Addins\Ad-Protect.Addin.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad-Protect.Server.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spamdet.SpamDetector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spamdet.SpamDetector.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiSpyCheck.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiSpyCheck
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\AntiSpyCheck
D2608046-DD09-A225-01BF-70C1EDD8B2E8
FD4DCB8B-C33A-4E70-A351-6FAB7E1071A4
32BD20FD-41FD-47FB-9BC9-28DCBD7D55D7
214345B8-BB69-498D-A168-29F58F15D806
CF231820-9904-4A37-B5B0-C87EF6F6CC82
D2C1986A-FBEC-4472-AABF-6D42F08DBC8E
F51BC478-D997-4C56-988D-79D9EEAAD1EC
9DA1990B-9BCA-4c80-AEFB-11A40FA849F9
D2C1986A-FBEC-4472-AABF-6D42F08DBC8E
D7ABE914-B8CF-4602-9145-6BDAAEDA21AA
F3210E86-46A8-5973-963F-0EF4CF226A0C
C628512D-A058-4BD4-B47B-B036F45FA02B
99A753C6-E429-46BD-989E-DD4A21CD059D
BBBD3E11-D201-46C9-8471-091D33159287
5AA883DB-7CFD-4737-B3C3-C671595ECCE5

7. Stop AntiSpyCheck process. If you do not know how to stop a running process, click here to read more.

8. Find and delete the following infected files from your system. Don’t worry if you don’t find these files. Just proceed to next step.

ad-protect.exe
AntiSpyCheck.exe
spamdet.dll

If you do not know how to find it or having difficulties locating the file, click here to read more.

9. Rename the files that you found above to “foundbadfile1.dll” and “foundbadfile2.dll” (if you can not rename this file, then try to restart your computer in safe mode then try to rename this file.) If you don’t know how to start the computer in safe mode, click here to read more.

10. Go to C:\Program Files\ folder and delete the “AntiSpyCheck” folder (if you can’t delete it, reboot your computer to safe mode then delete the folder. Do not worry about it if you can’t find this folder.)

11. Click here to bookmark this page (you will need to comeback to this page after reboot)
(If you are using Firefox click on Ctrl+D on your keyboard to bookmark this page)

12. Restart your computer

13. Go to your computer and delete the “foundbadfile1.dll” and “foundbadfile2.dll” file

14. You have just removed AntiSpyCheck from your computer manually.

Remove AntiSpyCheck with SmithfraudFix:

SmithfraudFix is a free tool that S!Ri created to remove fake anti-spyware programs. It can be risky so we cannot guarantee the result. Please use it with reservations. We would never recommend to purchase anything unless it’s necessary. That’s why we produce this free removal process.

1. Download SmithfraudFix tool and save it to your desktop.

2. Restart your computer and boot into Safe Mode. If you don’t know how to start the computer in safe mode, click here to read more.

3. Double-click on the SmithfraudFix.exe icon then follow the screen instructions. Option #2 should be selected in this case.

4. When you are prompted with “Do you want to clean the registry ?”, simply answer “Y”.

5. Reboot.

6. You should have removed AntiSpyCheck from your computer. Sometimes it might take more than once to work properly. If SmithfraudFix removal tool does not work, which is in no-guarantee due to the nature of spyware, please refer to the manual removal steps above or purchase a legitimate removal tool if necessary.

(Disclaimers: These instructions are free and not guaranteed to work. Please use it at your own risks. We are not responsible for any damages.)