Home / Spyware Encyclopedia / Fake Anti Spyware.Cleaner2009 Freeware
 Fake Anti Spyware.Cleaner2009 Freeware Technical Details
Category Fake Anti Spyware
Discovered 11/12/2007 5:10:00 PM
Modified 10/24/2009 4:45:56 PM
Threat Level Critical
Category Description

These are programs which look like any legitimate program but usually download without users permission, entice users into buying them by showing fake results to improve users PC performance. They may also download spyware and other unwanted programs.
Notice
Summary

The following http urls were started:
•int.azsxdcqwe.com/stat.php?func=install&pid=110053&ip=127.0.0.1&landing=3&subid=0&pro...
•int.mjnhbgvf.com/dom1.php
•int.azsxdcqwe.com/stat.php?func=install&pid=1&ip=127.0.0.1&landing=2&subid=0&progid=M...
The hosts file was updated with the following url-to-ip mappings: NA
The following internet connection was established:
193.142.244.194 : 80
193.142.244.145 : 80

The following Files were created:

NameVersionPublisherSignature (MD5)File Size (in KB)
..\QIP\IERCPT.DLL1.0.0.1WITABETT ENTERPRISES LTD74c463eae775b2a4ad312c33d82673dd110592
..\CLN_2009FreeInstall.exe2.0.44.0 36877ff36761cd3f1e03062df1bca127740864
..\CLEANER2009 FREEWARE \DIAGNOSIS.DAT    
..\FIRE-CODEC.V.1.000.EXE  f2ac1ab0099da2690953a4505ed2840a85276
..\SETUP_110178_2_.EXE  77bf038bfd0bd7f9b0f5405c3929ccce 
..\FIRE-CODEC.V.1.000.EXE   85276
..\XPSECURITYCENTER.EXE1.0.0.1 ff9edf2fbe502459e95b2128ae4cc569582144
..\ANTISPYWARE PRO XP\ASPROXP.EXE  02f7b87d2bc22647d11cb0acdb16a353900096
..\CLEANER2009 FREEWARE \USERAGENT.DLL  9c6d4b58e38b2ae56b608f26513b6622 
..\CLEANER2009 FREEWARE\VBPV.DAT   8
..\CLEANER2009 FREEWARE \USERAGENT.DLL1.0.0.1  245760
..\CLEANER2009 FREEWARE \UPDATER.DAT   366
..\CLEANER2009 FREEWARE\UP.DAT   34
..\CLEANER2009 FREEWARE \SOFTWAREDETECT.DAT    
..\CLEANER2009 FREEWARE \SCHEDULE.DAT   160
..\CLEANER2009 FREEWARE \SCANREPORT.DAT   62592
..\CLEANER2009 FREEWARE \REMNAG.DAT   1978368
..\CLEANER2009 FREEWARE\PV.DAT   8
..\CLEANER2009 FREEWARE\LAPV.DAT   3
..\CLEANER2009 FREEWARE \BNLINK.DAT   156
..\CLEANER2009 FREEWARE\AV.DAT   38
..\APPBASE\ZIPMAGIC.DAT   1097
..\APPBASE\YAHOOPL.DAT    
..\APPBASE\WISEINST.DAT   1162
..\APPBASE\WINZIP.DAT   1182
..\APPBASE\WINRAR.DAT   1096
..\APPBASE\WINGATE.DAT    

The following Registry Entries were created:

•..\Software\Microsoft\Windows\CurrentVersion\drivers
•..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{85DB3916-405B-29CD-B3EB-1567AD4C3053}
•..\Software\{AB15B77B-4284-EED7-D698-A2EA2F3F9F50}
•..\Software\Classes\Clsid\{85DB3916-405B-29CD-B3EB-1567AD4C3053}
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"S9201"\""%DAS.AU.APP DATA%\SOFTWARE LICENSORS\ANTISPYWARE PRO XP\ASPROXP.EXE" /AUTORUN"
•..\Software\SOFTWARE LICENSORS
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"GKZNHGUVENG"\"%WIN.SYS32%\RUNDLL32.EXE "%WIN.SYS32%\JDHHQJNYPNMBSC.DLL" ENTRYPOINT"
•..\Software\Microsoft\Windows\CurrentVersion\Uninstall\JBEYYVEVCISQSLJBI
•..\Software\PORNOVID
•..\Software\Microsoft\Windows\CurrentVersion\Uninstall\PORNOVID
•..\Software\Classes\PORNOVID
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"CLEANER2009 FREEWARE"\""%PF%\CLEANER2009 FREEWARE\UCLN.EXE" /MIN"
•..\Software\CLEANER2009 FREEWARE
•..\Software\Microsoft\Windows\CurrentVersion\Uninstall\UCLN_INSTALL_IS1
•..\Software\Microsoft\Windows\CurrentVersion\Uninstall\QUICKINSTALLPACK
•..\Software\Classes\IERCPT.IERCPTBHO.1
•..\Software\Classes\IERCPT.IERCPTBHO
•..\Software\Classes\Appid\{3A9377A6-BE7F-485D-908C-D44114691389}
•..\Software\Classes\Appid\IERCPT.DLL
•..\Software\Classes\Typelib\{A6FBD2E4-1C7E-4EAB-80DD-01DE2645566A}
•..\Software\Classes\Clsid\{D4CDC21D-43BE-4101-A1EF-E379F134771E}
•..\Software\Classes\Interface\{59C345BA-3D5E-44E3-9D10-D3848AF15D73}
Recommendation to remove Fake Anti Spyware.Cleaner2009 Freeware

Spyware Detector can remove Fake Anti Spyware.Cleaner2009 Freeware, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.
Download Spyware Detector and Scan for FREE
 
Search Threats
Customer Service Rating by LivePerson