Home Rogue Websites Bestcleaner.us

Bestcleaner.us

Posted: March 30, 2009

Bestcleaner.us is a rogue website and browser hijacker that simulates a virus scan to only give a scan result of fictious spyware infections. The website

Once the scan is complete, Bestcleaner.us offers the user to purchase the rogue anti-spyware application System Security, which alleges to "fix" all the system errors. Bestcleaner.us may pose a security risk to your computer and it should not be trusted as a safe website. It is recommended that you remove Bestcleaner.us and System Security immediately as to prevent additional harm to your computer and your privacy.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %\Documents and Settings%\All Users\Application Data\538654387
    2 %\Documents and Settings%\All Users\Application Data\538654387\1632575944.exe
    3 %\Documents and Settings%\All Users\Application Data\538654387\config.udb
    4 %\Documents and Settings%\All Users\Application Data\538654387\init.udb
    5 %\Documents and Settings%\All Users\Application Data\538654387\Languages
    6 %\Documents and Settings%\All Users\Application Data\538654387\Languages\English.lng
    7 %\Documents and Settings%\All Users\Application Data\538654387\Languages\German.lng
    8 %\Documents and Settings%\All Users\Application Data\538654387\Languages\Spanish.lng
    9 %UserProfile%\Desktop\System Security.lnk
    10 %UserProfile%\Start Menu\Programs\System Security
    11 %UserProfile%\Start Menu\Programs\System Security\System Security.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "1632575944"
Loading...