Home Malware Programs Rogue Anti-Virus Programs DiskClean

DiskClean

Posted: August 26, 2010

DiskClean (aka Disk Clean) is the latest rogue malware remover in a growing series of Korean-language computer viruses. Once active, Disk Clean will report false threats and display fake security alerts on the infected computer. DiskClean does this to convince you the PC is infected with malware. This fake program is promoted and installed through the use of Trojans and often comes bundled with other malware. Disk Clean is part of a blatant scam used to con you into paying for removal of infections which don't exist. Remove DiskClean and all associated threats using a reliable malware remover.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 C:\Program Files\DiskClean\DCAutoUpdate.exe
    2 C:\Program Files\DiskClean\DCEngine.dll
    3 C:\Program Files\DiskClean\DCUpdateServer.dat
    4 C:\Program Files\DiskClean\DiskClean.exe
    5 C:\Program Files\DiskClean\etc\avsrv.exe
    6 C:\Program Files\DiskClean\etc\avsrvc.exe
    7 C:\Program Files\DiskClean\etc\avSubEngine.exe
    8 C:\Program Files\DiskClean\etc\DCFilterDriver.SYS
    9 C:\Program Files\DiskClean\etc\dcMon.exe
    10 C:\Program Files\DiskClean\etc\DCmonRemote.dll
    11 C:\Program Files\DiskClean\etc\dcReg.exe
    12 C:\Program Files\DiskClean\etc\DCreport.exe
    13 C:\Program Files\DiskClean\partner.ini
    14 C:\Program Files\DiskClean\SoDCUpdateServer.dat
    15 C:\Program Files\DiskClean\Uninstall.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\DiskCleanHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\diskcleanmainHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}DiskCleanMain
Loading...