Fake Anti Spyware.Cleaner2009 Freeware - Spyware Detector

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / Fake Anti Spyware.Cleaner2009 Freeware

Fake Anti Spyware.Cleaner2009 Freeware Technical Details

Category		Fake Anti Spyware
Discovered		11/12/2007 5:10:00 PM
Modified		1/23/2009 4:10:59 PM
Threat Level		Critical

Category Description

These are programs which look like any legitimate program but usually download without users permission, entice users into buying them by showing fake results to improve users PC performance. They may also download spyware and other unwanted programs.

Notice

Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically in our Research Lab as a result of executing Spyware Files or browsing Internet. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Software.

We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Summary

The following http urls were started:

• ulog.cleaner2009pro.com/?action=23&abbr=UCLN_0001_10.0&pc_id=258381984&a=keyin&l=keyi...
• ulog.cleaner2009pro.com/?action=23&abbr=UCLN_0001_11.1&pc_id=3091853266&a=swp_sgl&l=k...
• registrydoctor2008.com/scns/15/img/i36_Scan.swf

The hosts file was updated with the following url-to-ip mappings:

127.0.0.1	http://in
127.0.0.1	https://1
127.0.0.1	https://8

The following internet connection was established:

85.17.4.104 : 80
58.65.234.193 : 80
216.195.56.166 : 443

The following Files were created:

Name	Version	Publisher	Signature (MD5)	File Size (in KB)
..\CLEANER2009 FREEWARE \DIAGNOSIS.DAT
..\APPBASE\SL_BLWIN.DAT				1110
..\APPBASE\TELEPPRO.DAT				1120
..\APPBASE\UPHIMPV.DAT				1166
..\APPBASE\WEBFERET.DAT				1119
..\APPBASE\WINRAR.DAT				1096
..\APPBASE\ZIPMAGIC.DAT				1097
..\CLEANER2009 FREEWARE\PV.DAT				8
..\CLEANER2009 FREEWARE \SOFTWAREDETECT.DAT				301
..\CLEANER2009 FREEWARE\VBPV.DAT				8
..\CLEANER2009 FREEWARE.LNK				646
..\APPBASE\AREADR4.DAT				1135
..\APPBASE\BABYLON.DAT				1108
..\APPBASE\CCGA.DAT				1121
..\APPBASE\DACCELER.DAT				1117
..\APPBASE\FFTSKS.DAT				22
..\APPBASE\FTPEXP.DAT				1115
..\APPBASE\GRAVMRU.DAT				1082
..\APPBASE\ICONEXTR.DAT				1169
..\APPBASE\JASC_P_P.DAT				1113
..\APPBASE\MACDRWEA.DAT				1125
..\APPBASE\MM_CON.DAT				1141
..\APPBASE\MPIMAGAL.DAT				1113
..\APPBASE\MSWMP.DAT				1193
..\APPBASE\NTBACKUP.DAT				1078

The following Registry Entries were created:

•	..\Software\Classes\Appid\IERCPT.DLL
•	..\Software\SOFTWARE LICENSORS
•	..\Software\Microsoft\Windows\CurrentVersion\Uninstall\UCLN_INSTALL_IS1
•	..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{85DB3916-405B-29CD-B3EB-1567AD4C3053}
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"GKZNHGUVENG"\"%WIN.SYS32%\RUNDLL32.EXE "%WIN.SYS32%\JDHHQJNYPNMBSC.DLL" ENTRYPOINT"
•	..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4CDC21D-43BE-4101-A1EF-E379F134771E}
•	..\Software\Classes\IERCPT.IERCPTBHO
•	..\Software\Microsoft\Windows\CurrentVersion\drivers
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"S9201"\""%DAS.AU.APP DATA%\SOFTWARE LICENSORS\ANTISPYWARE PRO XP\ASPROXP.EXE" /AUTORUN"
•	..\Software\Classes\Appid\{3A9377A6-BE7F-485D-908C-D44114691389}
•	..\Software\Classes\Interface\{59C345BA-3D5E-44E3-9D10-D3848AF15D73}
•	..\Software\Classes\Clsid\{D4CDC21D-43BE-4101-A1EF-E379F134771E}
•	..\Software\CLEANER2009 FREEWARE
•	..\Software\Microsoft\Windows\CurrentVersion\Uninstall\JBEYYVEVCISQSLJBI
•	..\Software\Classes\Clsid\{85DB3916-405B-29CD-B3EB-1567AD4C3053}
•	..\Software\PORNOVID
•	..\Software\Classes\PORNOVID
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"CLEANER2009 FREEWARE"\""%PF%\CLEANER2009 FREEWARE\UCLN.EXE" /MIN"
•	..\Software\Classes\Typelib\{A6FBD2E4-1C7E-4EAB-80DD-01DE2645566A}
•	..\Software\Classes\IERCPT.IERCPTBHO.1
•	..\Software\Microsoft\Windows\CurrentVersion\Uninstall\QUICKINSTALLPACK
•	..\Software\{AB15B77B-4284-EED7-D698-A2EA2F3F9F50}
•	..\Software\Microsoft\Windows\CurrentVersion\Uninstall\PORNOVID

Recommendation to remove Fake Anti Spyware.Cleaner2009 Freeware

Spyware Detector can remove Fake Anti Spyware.Cleaner2009 Freeware, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized E-mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.
	Speed up your computer and increase browsing performance by deleting Spyware & Adware
	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.
	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat