Remove Pyro AntiSpy. Description and removal instructions

 
Title: Pyro AntiSpy
Also known as: PyroAntiSpy, Pyro Anti Spy
Type: Malware
Severity scale:Pyro AntiSpy severity is 80  (80 / 100)
 
PyroAntiSpy infects computers through Zlob, Vundo and similar trojans. It loads large amounts of pop-up messages and system tray alerts trying to scare people with fabricated infection reports. The main purpose of this annoying behavior is to gain a purchase by convincing victims that Pyro Anti Spy is a security tool.
Do not trust Pyro AntiSpy! It can neither locate nor erase computer parasites because Pyro Anti Spy is a malware itself. It may download and install other parasites on the compromised machine. Remove PyroAntiSpy as soon as possible.


Related files: %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PyroAntiSpy 2.2.lnk, %UserProfile%\Desktop\PyroAntiSpy.lnk, %UserProfile%\Local Settings\Temp\[RANDOM NAME].tmp, %UserProfile%\Start Menu\PyroAntiSpy 2.2.lnk, %ProgramFiles%\PyroAntiSpy\blacklist.txt, %ProgramFiles%\PyroAntiSpy\Lang\English.ini, %ProgramFiles%\PyroAntiSpy\PyroAntiSpy.url, %UserProfile%\Start Menu\Programs\PyroAntiSpy\PyroAntiSpy 2.2 Website.lnk, %UserProfile%\Start Menu\Programs\PyroAntiSpy\PyroAntiSpy 2.2.lnk, %UserProfile%\Start Menu\Programs\PyroAntiSpy\Uninstall PyroAntiSpy 2.2.lnk, %ProgramFiles%\PyroAntiSpy\ref.dat

Pyro AntiSpy properties:
• Shows commercial adverts
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Pyro AntiSpy removal:

remover for Pyro AntiSpy

Pyro AntiSpy manual removal:

Kill processes:
PyroAntiSpy.exe uninst.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”PyroAntiSpy” = “C:\Program Files\PyroAntiSpy\PyroAntiSpy.exe /h”
HKEY_CLASSES_ROOT\CLSID\{1696AFC0-5194-4380-4EAD-1ABA5BCE1B57}
HKEY_CLASSES_ROOT\Interface\{0EF1C54E-C3B6-4BD4-BC03-B8C307A018E5}
HKEY_CLASSES_ROOT\Interface\{14B17A8E-B176-47A0-B6BC-4E1BA8228BD0}
HKEY_CLASSES_ROOT\Interface\{31115F60-D58E-42AF-89F0-E524A55427BA}
HKEY_CLASSES_ROOT\Interface\{C2194F32-D124-4956-8060-AE4696A78911}
HKEY_CLASSES_ROOT\Interface\{C783B30B-54CB-4745-AC2A-D41A4948C975}
HKEY_CLASSES_ROOT\Interface\{EE22CCD9-5D92-459B-B955-4115E6A1D0D7}
HKEY_CLASSES_ROOT\Interface\{F813DA8B-A263-450E-96AC-DB4BA5D55605}
HKEY_CLASSES_ROOT\Interface\{FF753266-C9EF-490C-85D0-A1A4C24FE8D2}
HKEY_CLASSES_ROOT\TypeLib\{12FCEB01-1FB2-486C-BBCB-7479300468F1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\PyroAntiSpy.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PyroAntiSpy
HKEY_LOCAL_MACHINE\SOFTWARE\PyroAntiSpy
HKEY_CLASSES_ROOT\Interface\{38F560FD-646A-44B0-AD5E-3069D8ADC851}
HKEY_CLASSES_ROOT\Interface\{50229B5C-ED47-49EC-8959-F66758830C5C}
HKEY_CLASSES_ROOT\Interface\{5F0E78FA-C76B-49FB-88FC-61A7306C2FE1}
HKEY_CLASSES_ROOT\Interface\{6667E268-6334-4204-97DF-85F1D27D7CC9}
HKEY_CLASSES_ROOT\Interface\{6D1595CE-B92A-47C5-9CC3-AE11E5A9AAFA}
HKEY_CLASSES_ROOT\Interface\{844EC9CE-24A3-491A-A660-B8B7DF4766BA}
HKEY_CLASSES_ROOT\Interface\{A363B82A-1069-41EC-B185-188B59F504E6}
HKEY_CLASSES_ROOT\Interface\{BC760874-E3AC-4D05-969B-8FC28EB85252}
Unregister DLLs:
%ProgramFiles%\\PyroAntiSpy\\msvcp71.dll %ProgramFiles%\\PyroAntiSpy\\msvcr71.dll

Delete files:
%UserProfile%\\Application Data\\Microsoft\\Internet Explorer\\Quick Launch\\PyroAntiSpy 2.2.lnk %UserProfile%\\Desktop\\PyroAntiSpy.lnk %UserProfile%\\Local Settings\\Temp\\[Random Name].TMP %UserProfile%\\Start Menu\\PyroAntiSpy 2.2.lnk %ProgramFiles%\\PyroAntiSpy\\blacklist.txt %ProgramFiles%\\PyroAntiSpy\\Lang\\English.ini %ProgramFiles%\\PyroAntiSpy\\PyroAntiSpy.url %UserProfile%\\Start Menu\\Programs\\PyroAntiSpy\\PyroAntiSpy 2.2 Website.lnk %UserProfile%\\Start Menu\\Programs\\PyroAntiSpy\\PyroAntiSpy 2.2.lnk %UserProfile%\\Start Menu\\Programs\\PyroAntiSpy\\Uninstall PyroAntiSpy 2.2.lnk %ProgramFiles%\\PyroAntiSpy\\ref.dat

Other programs to remove Pyro AntiSpy:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 26/08/08
Information updated: 26/08/08

Additional resources related to Pyro AntiSpy:

Attention: If you know or you have a website or page about Pyro AntiSpy removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Pyro AntiSpy parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: