Prozac Online Buy Antabuse Cipro Online Buy Cymbalta Toprol XL Online Buy Cipro Elimite Online Buy Neurontin Nexium Online Buy Seroquel

CleanUp Antivirus is a fake malware remover, also known as rogue security software. CleanUp Antivirus does NOT remove malware from infected computers, but instead poses as a legitimate security tool, and only ends up ripping people off. CleanUp Antivirus is corrupt software, designed to scam people out of their money. CleanUp Antivirus infects computer after computer, and does so effectively, using the help of Trojan viruses and misleading advertising on the internet.

Once installed on a computer, CleanUp Antivirus will perform a ‘system scan’ and report multiple infections. These infections do not exist! CleanUp Antivirus reports false infections in an attempt to coerce people into thinking their computer is completely buggered, and the only remedy is to buy the full version of CleanUp Antivirus to remove the infections. Do NOT fall for the CleanUp Antivirus scam, whatever you do! Bear in mind that all security warnings, system scans and alerts from CleanUp Antivirus are fake, intended to only scare the system user into buying this fake security software.

Automated Detection for CleanUp Antivirus

CleanUp Antivirus Manual Removal Instructions

Stop CleanUp Antivirus system processes:

c:\\Documents and Settings\\All Users\\Application Data\\345d567\\CU345d.exe
%UserProfile%\\Recent\\grid.exe
%UserProfile%\\Recent\\PE.exe

Unregister CleanUp Antivirus DLLs:

c:\\Documents and Settings\\All Users\\Application Data\\345d567\\sqlite3.dll
c:\\Documents and Settings\\All Users\\Application Data\\345d567\\mozcrt19.dll
%UserProfile%\\Recent\\DBOLE.dll
%UserProfile%\\Recent\\FS.dll

Remove CleanUp Antivirus files:

CleanUp Antivirus.lnk
CleanUp Antivirus
c:\\Documents and Settings\\All Users\\Application Data\\345d567\\Quarantine Items
c:\\Documents and Settings\\All Users\\Application Data\\CUCAISTUA\\CUEWA.cfg
c:\\Documents and Settings\\All Users\\Application Data\\CUCAISTUA\\
c:\\Documents and Settings\\All Users\\Application Data\\345d567\\CUASys\\vd952342.bd
c:\\Documents and Settings\\All Users\\Application Data\\345d567\\CUASys\\
c:\\Documents and Settings\\All Users\\Application Data\\345d567\\BackUp\\
c:\\Documents and Settings\\All Users\\Application Data\\345d567\\CUA.ico
c:\\Documents and Settings\\All Users\\Application Data\\345d567\\sqlite3.dll
c:\\Documents and Settings\\All Users\\Application Data\\345d567\\mozcrt19.dll
c:\\Documents and Settings\\All Users\\Application Data\\345d567\\CU345d.exe
c:\\Documents and Settings\\All Users\\Application Data\\345d567\\46.mof
c:\\Documents and Settings\\All Users\\Application Data\\345d567\\
c:\\Program Files\\Mozilla Firefox\\searchplugins\\search.xml
%UserProfile%\\Application Data\\Microsoft\\Internet Explorer\\Quick Launch\\CleanUp Antivirus.lnk
%UserProfile%\\Application Data\\CleanUp Antivirus\\cookies.sqlite
%UserProfile%\\Application Data\\CleanUp Antivirus\\Instructions.ini
%UserProfile%\\Application Data\\CleanUp Antivirus
%UserProfile%\\Start Menu\\Programs\\CleanUp Antivirus.lnk
%UserProfile%\\Start Menu\\CleanUp Antivirus.lnk
%UserProfile%\\Desktop\\CleanUp Antivirus.lnk
%UserProfile%\\Recent\\tempdoc.drv
%UserProfile%\\Recent\\exec.tmp
%UserProfile%\\Recent\\eb.tmp
%UserProfile%\\Recent\\DBOLE.sys
%UserProfile%\\Recent\\DBOLE.dll
%UserProfile%\\Recent\\tjd.tmp
%UserProfile%\\Recent\\tjd.sys
%UserProfile%\\Recent\\tempdoc.tmp
%UserProfile%\\Recent\\pal.tmp
%UserProfile%\\Recent\\pal.drv
%UserProfile%\\Recent\\grid.exe
%UserProfile%\\Recent\\FS.dll
%UserProfile%\\Recent\\CLSV.tmp
%UserProfile%\\Recent\\PE.exe
%UserProfile%\\Recent\\cb.tmp
%Documents and Settings%\\[UserName]\\Start Menu\\Programs\\CleanUp Antivirus.lnk
%Documents and Settings%\\[UserName]\\Start Menu\\CleanUp Antivirus.lnk
%Documents and Settings%\\[UserName]\\Desktop\\CleanUp Antivirus.lnk
%Documents and Settings%\\[UserName]\\Application Data\\CleanUp Antivirus\\cookies.sqlite
%Documents and Settings%\\[UserName]\\Application Data\\Microsoft\\Internet Explorer\\Quick Launch\\CleanUp Antivirus.lnk
%Documents and Settings%\\[UserName]\\Application Data\\CleanUp Antivirus
%Documents and Settings%\\All Users\\Application Data\\[randomsymbols]\\

Remove CleanUp Antivirus registry values:

HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\StandardProfile\\AuthorizedApplications\\List "C:\\Documents and Settings\\All Users\\Application Data\\345d567\\CU345d.exe"
HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\StandardProfile\\AuthorizedApplications\\List "C:\\Documents and Settings\\All Users\\Application Data\\345d567\\CU345d.exe"
HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\User Agent\\Post Platform "Library1.00195"
HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"
HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\\Software\\Classes\\Software\\Microsoft\\Internet Explorer\\SearchScopes "URL" = "http://findgala.com/?&uid=195&q={searchTerms}"
HKEY_USERS\\.DEFAULT\\Software\\Microsoft\\Internet Explorer\\SearchScopes "URL" = "http://findgala.com/?&uid=195&q={searchTerms}"
HKEY_CLASSES_ROOT\\Software\\Microsoft\\Internet Explorer\\SearchScopes "URL" = "http://findgala.com/?&uid=195&q={searchTerms}"
HKEY_CLASSES_ROOT\\CLSID\\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\\CU345d.DocHostUIHandler
HKEY_CURRENT_USER\\Software\\3
HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run "CleanUp Antivirus"
HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\User Agent\\Post Platform "App/7.00195"
HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\\Software\\CleanUp Antivirus

Important Disclaimer

CleanUp Antivirus is related to:

  » No related posts

This entry was posted on Monday, March 8th, 2010 at 5:38 am and is filed under Rogue Anti-Spyware Program. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.