Home/ Spyware Encyclopedia / Fake Anti Spyware.PCCleanPro | |  | Fake Anti Spyware.PCCleanPro Technical Details |  |
|
| Category |
 |
Fake
Anti Spyware |
| Discovered |
|
7/4/2008
14:58:00 PM |
| Modified |
|
7/4/2008
16:15:00 PM |
| Threat
Level |
|
Critical |
| Description |
|
PCClean
Pro is a Fake Anti
Spyware. PCClean
Pro will not protect
user’s computer
system against spyware,
but this program
can actually expose
user to more security
threats PCClean
Pro is usually can
be downloaded and
installed with the
help of Trojan like
Zlob, through browser
security exploits
or other fake software.
Once PCClean Pro
is in computer system
it will generate
fake warning messages
similar to Windows
alerts claiming
that user's computer
is in danger and
infected with various
Trojans, viruses
and other malware.
If users click on
those fake warning
messages, they will
be directed to PCClean
Pro’s home
where he will be
forced to purchase
the "full"
version of PCClean
Pro application. |
| Summary |
|
The
hosts file was updated
with the following
url-to-ip mappings
: n/a
The
following http urls
were started :n/a
Generated smtp
traffic : n/a
There was a new
connection established
with a remote IRC
Server : n/a
The Following
Hidden Entries Created
: n/a
The
following internet
connection was established:
n/a |
| Processes |
|
PC
Clean Pro.exe |
| Drivers |
|
N/A |
| Folders
created |
|
%COMMON_PROGRAMS%\PC
Clean Pro
%PFDIR%\PC Clean
Pro |
| Browsed
Sites |
|
N/A |
| When
the Fake Anti Spyware
is executed, it
creates the following
files: |
| Name |
Version |
Publisher |
Signature
(MD5) |
File
Size (in Bytes) |
| ..\com\pcprosd.dll |
|
|
fff7c894e8381f44cce23fa3d877c049 |
307200 |
| ..\pc
clean pro\pc
clean pro.exe |
2.0.2.1 |
PC
Clean Pro.com |
92e2470d0ceb6c817b4957726b8c4a86 |
1482752 |
| ..\desktop\pc
clean pro.lnk |
|
|
|
1518 |
| ..\pccleanpro_installer_eng.exe |
|
|
c87f683f56af0f6cc17499899144c7c9 |
267264 |
|
|
| When
the Fake Anti Spyware
is executed, it
creates the following
Registry entries: |
| • |
..\software\microsoft\windows\currentversion\run\"pc
clean pro" |
| • |
..\software\pc
clean pro |
| • |
..\software\classes\allfilesystemobjects\shellex\contextmenuhandlers\pcprosd.dll |
| • |
..\software\classes\clsid\{41d2bac9-3772-4554-b038-15447f98bb96} |
| • |
..\software\microsoft\windows\currentversion\shell
extensions\approved\"{41d2bac9-3772-4554-b038-15447f98bb96}" |
| • |
..\software\microsoft\windows\currentversion\uninstall\pc
clean pro |
| • |
..\software\pc
clean pro |
|
Snapshot
 |
|
Recommendation to remove Fake Anti Spyware.PCCleanPro |  | Spyware Detector can remove Fake Anti Spyware.PCCleanPro, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free. |
| |
|
| |
| |
| |  | Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.
| |  | Speed up your computer and increase browsing performance by deleting Spyware & Adware | | | Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software. | | | Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes. |
|
|
| |  | | | | | |  | |  Submit a Threat
Submit a threat to be reviewed by our research team
Submit a Threat | |  |
|
|