Home Malware Programs Rogue Anti-Spyware Programs PCCleaner 2008

PCCleaner 2008

Posted: May 16, 2008

ScreenshotPCCleaner 2008, or PC Cleaner 2008, is a rogue anti-spyware application designed to scare you into purchasing PCCleaner 2008's full version. PCCleaner 2008 may be installed and downloaded via trojan called Zlob found bundled on fake video codecs from adult websites.

Once you're infected, Zlob Trojan will display misleading warning messages that pop up on your Taskbar. The fake warning message may claim that your computer is infected with dangerous parasites and will pretend to display spyware results only to trick you into purchasing PCCleaner 2008's commercial version.

PCCleaner 2008 is known to be a clone of DriveCleaner. PCCleaner 2008 program may be difficult to remove manually, and may continue to try to recreate itself.


ScreenshotScreenshot

File System Modifications

  • The following files were created in the system:
    # File Name
    1 pc-cleaner.db
    2 pc-cleaner.exe
    3 pc-cleaner.lnk
    4 pccleaner.pkg
    5 pcsd.dll
    6 register pc-cleaner.lnk
    7 start pc-cleaner.lnk
    8 uninstall pc-cleaner.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USERS\Software\PC-CleanerHKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82297D11-31C1-40B1-960A-BDF40B3B365F}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\”{82297D11-31C1-40B1-960A-BDF40B3B365F}” = “pcsd”HKEY_LOCAL_MACHINE\SOFTWARE\PC-CleanerHKEY_USERS\S-1-5-21-1172441840-534431857-1906119351-500\Software\Microsoft\Windows\CurrentVersion\Run\”PC-Cleaner” = “”C:\Program Files\PC-Cleaner\PC-Cleaner.exe” hide”HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers\pcsdHKEY_CLASSES_ROOT\CLSID\{82297D11-31C1-40B1-960A-BDF40B3B365F}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}PC-Cleaner
Loading...