What this programs does:
XP Antispyware 2009 is a rogue anti-spyware program from the same family as
XP Antivirus 2008. Just like its predecessor, XP AntiSpyware 2009 is advertised and promoted through the use of fake online anti-malware scanners and malware that displays fake security alerts on your computer. Both the online scanners and the malware state that your computer is infected and that you should download and install XP Antispyware 2009 in order to clean and protect your computer.
If you decide to install XP Antispyware 2009 it will configure itself to run automatically when your computer starts. It will also install a variety of files on your computer that act as fake malware so that the program will find them while scanning. These files are:
c
Documents and Settings\All Users\Application Data\boveketuz.inf
c
Documents and Settings\All Users\Application Data\duvuja.lib
c
Documents and Settings\All Users\Application Data\koqisybi.bat
c
Documents and Settings\All Users\Application Data\ucozoma.reg
c
Documents and Settings\All Users\Documents\jyxigifo._sy
c
Documents and Settings\All Users\Documents\ysix._dl
%UserProfile%\Application Data\mepa.com
%UserProfile%\Cookies\guwysa.dat
%UserProfile%\Cookies\sasu.bat
%UserProfile%\Local Settings\Application Data\jyxot.dl
%UserProfile%\Local Settings\Application Data\mivekely._sy
%UserProfile%\Local Settings\Application Data\pozik.vbs
%UserProfile%\Local Settings\Application Data\wosi.vbs
c
Program Files\Common Files\gykyr.bat
c
Program Files\Common Files\ogumy.lib
c
Program Files\Common Files\uwolykiw.com
c
WINDOWS\akikuvopa.dll
c
WINDOWS\lydumyhery.scr
c
WINDOWS\radimup.lib
c
WINDOWS\toli.pif
c
WINDOWS\system32\_scui.cpl
c
WINDOWS\system32\oxatymy.dl
Once XP Antispyware is started, it will automatically start scanning your computer and list a variety of infections that cannot be removed unless you first purchase the program. These infections will consist of legitimate files and Registry entries as well as the above fake malware files that XP Antispyware installed. Remember, though, that the above files are not real malware and cannot harm your computer.
While the program is running, you may also find that your computer starts to become slower. This is because the program is constantly running in the background and using up your computer's resources that other legitimate programs should be using. XP Antispyware will also occasionally display fake security alerts stating that your computer is infected and that you should purchase the program in order to protect yourself. Images of these fake alerts and of the program can be found below.