AntiSpywareMaster

AntiSpywareMaster is a fake spyware removal tool that originated in April 2008. Most spyware scanners and anti-virus software detect it as a potential threat.

Autorun references:

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run antispywaremaster

Registry items:

HKEY_CURRENT_USER\software\antispywaremaster
HKEY_CURRENT_USER\software\antispywaremaster cookieparams
HKEY_CURRENT_USER\software\antispywaremaster infectioncount
HKEY_CURRENT_USER\software\antispywaremaster installdate
HKEY_CURRENT_USER\software\antispywaremaster lastdetecttime
HKEY_CURRENT_USER\software\antispywaremaster lastscantime
HKEY_CURRENT_USER\software\antispywaremaster totalscancount
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run antispywaremaster
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run antispywaremaster

Files:

install_asm_en.exe
%common_programs%\antispywaremaster\antispywaremaster.lnk
%common_programs%\antispywaremaster\uninstall antispywaremaster.lnk
%profile%\application data\microsoft\internet explorer\quick launch\antispywaremaster.lnk
%program_files%\antispywaremaster\asm.exe
%program_files%\antispywaremaster\asm.exe
install_asm_en.exe

Directories:

%common_programs%\antispywaremaster
%program_files%\antispywaremaster