Home Malware Programs Rogue Anti-Spyware Programs Spyware Clear

Spyware Clear

Posted: September 22, 2014

Threat Metric

Ranking: 19,637
Threat Level: 10/10
Infected PCs: 4,752
First Seen: September 22, 2014
Last Seen: February 8, 2025
OS(es) Affected: Windows


Spyware Clear is a rogue anti-spyware program that creates false warning messages for threatening software as a lead-in to encouraging the purchase of its registration key. In addition to their misleading system information, scamware programs like Spyware Clear may harm your PC's security by modifying settings or even disabling important software, and malware researchers tend to advise deleting Spyware Clear in all cases. Using legitimate anti-malware products, along with the steps necessary for disabling automatically-starting scamware, can help guarantee that Spyware Clear is uninstalled completely.

Clearing the Air About Spyware Clear

While some PC security tools have classified Spyware Clear within the category of a PUP or Potentially Unwanted Program, all evidence to date is indicative of Spyware Clear being a fake anti-spyware product without legitimate spyware-removal features. Its Web domain, spywareclear.com, also has tripped multiple flags common to scamware sites, including its owner's use of an identity-obscuring service and the overall lack of an industry-standardized software-marketing campaign to promote its product. However, because the Spyware Clear website is less than half a year old, many PC security institutions have yet to classify it as unsafe.

Spyware Clear claims that Spyware Clear can provide a safer banking experience, 'real-time protection,' daily updates to identify potential spyware and even anti-virus features, none of which have been confirmed by malware analysts. Although Spyware Clear does generate pop-up warning messages and may also seem to be able to scan your PC for threats, its results frequently bear little resemblance to reality, and the accuracy of its threat database is open to question.

The fake threat information offered by Spyware Clear does serve the purpose of encouraging victims to pay a registration fee. Once registered, Spyware Clear claims to be capable of removing all detected threats, although malware researchers have found no substantial difference in threat-removal functions between registered and unregistered versions of this supposed anti-spyware scanner.

Clearing Spyware Clear Off of Your Hard Drive

Despite Spyware Clear's poor business history and questionable ability to protect your PC, malware experts have yet to connect Spyware Clear to attacks such as redirecting a Web browser, blocking legitimate security products or disabling security features (such as your network firewall). The latter attacks may be symptomatic of the presence of advanced scamware and high-level threats. Currently, Spyware Clear only is categorized as a low-level threat to Windows machines, but still should be removed, as a potential security problem. Spyware Clear also has not yet been seen on non-Windows PCs and has not been classified within any of the major scamware families (FakeRean, WinWebSec, FakePAV, et cetera).

If you've already purchased Spyware Clear's registration key, malware experts recommend that you contact relevant credit card companies or banks to issue a chargeback. Credit card numbers and other confidential data transferred in the process of buying Spyware Clear may be vulnerable to exploitation in future crimes. However, for removing Spyware Clear off of your personal computer, legitimate anti-malware products always should be used. The ideal circumstances for deleting Spyware Clear and most forms of scamware include restarting your PC within Safe Mode or even booting via a recovery USB device.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\Spyware Clear\SpywareClearUpdate.exe File name: SpywareClearUpdate.exe
Size: 5.44 MB (5441928 bytes)
MD5: 44dfd66f70ca2473785f836f24444db1
Detection count: 75
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Spyware Clear
Group: Malware file
Last Updated: September 24, 2014
%PROGRAMFILES(x86)%\Spyware Clear\SpywareClearShield.exe File name: SpywareClearShield.exe
Size: 3.73 MB (3733384 bytes)
MD5: 585333e54dd11e7ffe9301efe6e85999
Detection count: 70
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Spyware Clear
Group: Malware file
Last Updated: September 24, 2014
%PROGRAMFILES(x86)%\Spyware Clear\SC_svc64.exe File name: SC_svc64.exe
Size: 3.03 MB (3033992 bytes)
MD5: bbac21cbabec497a0e77caf41a77f3f6
Detection count: 70
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Spyware Clear
Group: Malware file
Last Updated: September 24, 2014
%PROGRAMFILES%\Spyware Clear\SC_svc.exe File name: SC_svc.exe
Size: 1.95 MB (1954696 bytes)
MD5: d87e4a8242adc26b4c76583332446c83
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Spyware Clear
Group: Malware file
Last Updated: September 24, 2014
%USERPROFILE%\Downloads\SpywareClearSetup.exe File name: SpywareClearSetup.exe
Size: 720.56 KB (720568 bytes)
MD5: ecfe11be092dc8ea8cbbbf75be0450ed
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Downloads
Group: Malware file
Last Updated: March 30, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{8B01D4B7-0860-452C-AC2B-5CE0140C82D4}{B36D9EA9-ABCA-4F9F-B181-49929A7B73D1}{C03C262D-9260-4124-B50E-04FB49ED0504}{CB83C956-D8A2-40E1-B139-5B8A2F5750DF}{E563E407-B348-41FB-BC3D-EACE3BD4B1A1}{E778C05E-AFF7-4924-B04A-D4084859D53A}File name without pathSpyware Clear.lnkHKEY..\..\..\..{RegistryKeys}SOFTWARE\Google\Chrome\NativeMessagingHosts\com.spywareclear.internetguardSoftware\Microsoft\Internet Explorer\Approved Extensions\{E563E407-B348-41FB-BC3D-EACE3BD4B1A1}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{8B01D4B7-0860-452C-AC2B-5CE0140C82D4}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C03C262D-9260-4124-B50E-04FB49ED0504}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E563E407-B348-41FB-BC3D-EACE3BD4B1A1}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C03C262D-9260-4124-B50E-04FB49ED0504}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E563E407-B348-41FB-BC3D-EACE3BD4B1A1}SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SpywareClearShieldSOFTWARE\Microsoft\Windows\CurrentVersion\Run\SpywareClearUpdaterSoftware\Spyware ClearSOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\com.spywareclear.internetguardHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}{5FB600FF-BC65-471F-A3F8-C2666863BA75}_is1

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Spyware Clear%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Spyware Clear with PC Tech Hotline%ALLUSERSPROFILE%\Spyware Clear%APPDATA%\Spyware Clear%PROGRAMFILES%\Spyware Clear%PROGRAMFILES(x86)%\Spyware Clear%USERPROFILE%\AppData\LocalLow\Spyware Clear

Related Posts

Loading...