Tuesday, January 27, 2009

myCleanerPC Adware

Removing myCleanerPC
Categories: Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.


Visible Symptoms:
Files in system folders:
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\1.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\2.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\3.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\4.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\5.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\CleanerDefs.css
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\error.log
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\history.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\schedule.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\Signatures.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\stats.log
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\user.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\1.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\2.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\3.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\4.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\5.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\CleanerDefs.css
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\error.log
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\history.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\schedule.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\Signatures.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\stats.log
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\user.dat

How to detect myCleanerPC:

Files:
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\1.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\2.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\3.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\4.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\5.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\CleanerDefs.css
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\error.log
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\history.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\schedule.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\Signatures.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\stats.log
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\user.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\1.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\2.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\3.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\4.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\5.jpg
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\CleanerDefs.css
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\error.log
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\history.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\schedule.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\Signatures.dat
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\stats.log
[%SYSTEM%]\Documents and Settings\All Users\Application Data\myCleanerPC\user.dat

Folders:
[%PROGRAM_FILES%]\myCleanerPC
[%APPDATA%]\myCleanerPC
[%PROGRAMS%]\myCleanerPC

Registry Keys:
HKEY_CLASSES_ROOT\clsid\{41765812-f0d1-4837-9662-5fbcd9cc2dee}
HKEY_CLASSES_ROOT\clsid\{4f81b064-e53b-48cd-98dd-84abd18d4cbe}
HKEY_CLASSES_ROOT\clsid\{72556741-56fd-45a8-93da-ee5ee41b908a}
HKEY_CLASSES_ROOT\clsid\{9bd6a9a7-7d88-4658-8be4-1aa69174f8af}
HKEY_CLASSES_ROOT\clsid\{a582b627-ce65-4ba7-b44f-8b9609193c32}
HKEY_CLASSES_ROOT\clsid\{ab9f5dd2-427a-4ce3-9522-3756bf2f0048}
HKEY_CLASSES_ROOT\clsid\{ae94bd95-408c-4506-ba90-2faacb173927}
HKEY_CLASSES_ROOT\clsid\{b6b86368-2787-49b2-9054-f32b4b839af1}
HKEY_CLASSES_ROOT\clsid\{f30973b1-dd06-4885-8c39-ee3ced95061f}
HKEY_CLASSES_ROOT\interface\{1295e3d3-fdc8-4a3e-8e60-c6031601d08d}
HKEY_CLASSES_ROOT\interface\{14627bd3-6c96-4b5f-aa47-941cb370bb94}
HKEY_CLASSES_ROOT\interface\{244db87b-7310-46db-a7b8-651b8aec8648}
HKEY_CLASSES_ROOT\interface\{26953a7a-bc68-496e-a479-ae975b0bfc6a}
HKEY_CLASSES_ROOT\interface\{7265b88d-c685-4290-8b25-3659f8626031}
HKEY_CLASSES_ROOT\interface\{908099c8-e0c7-4787-b084-96f915383598}
HKEY_CLASSES_ROOT\interface\{af6015bd-186a-4e60-a08e-0fc1c53324d9}
HKEY_CLASSES_ROOT\interface\{bc978724-6c36-4f11-9a63-e85834ba344f}
HKEY_CLASSES_ROOT\interface\{cc03d597-a404-4b95-8544-fd215925b677}
HKEY_CLASSES_ROOT\interface\{dba4c028-544c-4d46-8d96-87e12b655cdd}
HKEY_CLASSES_ROOT\interface\{fa6eea37-5d54-490f-801e-dc0ad91c1045}
HKEY_CLASSES_ROOT\interface\{fc912f2e-a101-4015-b822-7d2d71d15545}
HKEY_CLASSES_ROOT\typelib\{472fa6ed-4a44-49ba-8241-7ca38806c618}
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\mycleanerpc

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls

Removing myCleanerPC:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Removing Joiner Trojan
Win32.Agent.wc Trojan Cleaner
Espile Trojan Symptoms
Dowque.AAZ Trojan Removal instruction

No comments: