Home Possibly Unwanted Program MPC Cleaner

MPC Cleaner

Posted: November 7, 2015

Threat Metric

Ranking: 2,899
Threat Level: 1/10
Infected PCs: 66,726
First Seen: November 7, 2015
Last Seen: October 17, 2023
OS(es) Affected: Windows


MPC Cleaner by DotCash Limited Inc is a Potentially Unwanted Program (PUP) that may exhibit some typical adware traits. Although its description may seem appealing to you, it is advisable not to install this questionable application because it may worsen the performance of your PC. MPC Cleaner also may expose you to corrupted Web pages, which may contribute to the installation of aggressive cyber threats. The authors of this PUP advertise it as a reliable system optimization utility. According to them, MPC Cleaner should boost the operating speed of the PC by cleaning unnecessary junk files. It is also expected to block annoying online ads and prevent the loading of harmful sites.

In reality, this PUP doesn't behave as its developers assure. MPC Cleaner is not a legit security program, so it cannot guarantee the stability of your system or improve its performance. The main function of this suspicious application is to provide partner sites with a steady incoming Web traffic. For this purpose, MPC Cleaner may cause changes in the Web pages that you may not enjoy. It switches the homepage and default search engine of Google Chrome, Mozilla Firefox and Internet Explorer to Search.mpc.am. As you probably suspect, this provider may not show accurate results. If you type your search terms on this site, which is not recommended by the specialists, you may encounter too many sponsored links.

A significant part of them may lack any slogan informing you they are ads. MPC Cleaner also may create various pop-ups, banners and interstitial ads, some of which may appear as an additional layer above important page elements and navigation tools. Some of these commercial materials may suggest you download additional PUPs. Certain ads may transfer you to sites that should be avoided if you wish to protect yourself from hoaxes and infections. DotCash Limited Inc may spread MPC Cleaner in software bundles, which explains why some users cannot recall installing it. You should scan your system with reputable security software to eliminate this PUP efficiently.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%SYSTEMDRIVE%\Users\<username>\Downloads\mpc-cleaner-1-2-5222-0610-multi-win.exe File name: mpc-cleaner-1-2-5222-0610-multi-win.exe
Size: 6.47 MB (6472424 bytes)
MD5: d5d473b0fdd3d0219ee98d4b5a13d144
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\Users\<username>\Downloads\mpc-cleaner-1-2-5222-0610-multi-win.exe
Group: Malware file
Last Updated: May 13, 2023
file.exe File name: file.exe
Size: 2.79 MB (2790041 bytes)
MD5: f1927b62be02e31523e46662bf45685c
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: June 27, 2016
%PROGRAMFILES%\MPC_setup.exe File name: MPC_setup.exe
Size: 6.29 MB (6294348 bytes)
MD5: c46e01d6da4c64e1e19501fc0c8e26b6
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%
Group: Malware file
Last Updated: March 5, 2016
C:\Program Files\mpc cleaner\mpctray.exe File name: C:\Program Files\mpc cleaner\mpctray.exe
MD5: b52bca1b2e9ffa71d9bb33dad610ec4f
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\Program Files\MPC Cleaner\Uninstall.exe File name: C:\Program Files\MPC Cleaner\Uninstall.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
CrashReport.exe File name: CrashReport.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
AdcManager.dll File name: AdcManager.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
AndriodServer.dll File name: AndriodServer.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
BrowserPlugIn.dll File name: BrowserPlugIn.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
CeBase.dll File name: CeBase.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Cleaner.dll File name: Cleaner.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Config.dll File name: Config.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Database.dll File name: Database.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
DataCenter.dll File name: DataCenter.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
FloatFrame.dll File name: FloatFrame.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Guid.dll File name: Guid.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
LogReport.dll File name: LogReport.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
LpcManager.dll File name: LpcManager.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
MainFrame.dll File name: MainFrame.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Monitor.dll File name: Monitor.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
MPC.exe File name: MPC.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
MPCAnalysisPdb.exe File name: MPCAnalysisPdb.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
MPCAutoClean.exe File name: MPCAutoClean.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
MPCCheckDump.exe File name: MPCCheckDump.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
MPCProtectService.exe File name: MPCProtectService.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
MpcSafeDll.dll File name: MpcSafeDll.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
MpcSafeDll64.dll File name: MpcSafeDll64.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
MPCSecurity.exe File name: MPCSecurity.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
MPCSetting.exe File name: MPCSetting.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
MPCSmartBalance.exe File name: MPCSmartBalance.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
MpcTray64.exe File name: MpcTray64.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Report.dll File name: Report.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
SafeNavi.dll File name: SafeNavi.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
SafeNavi64.dll File name: SafeNavi64.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
SafeProtect.dll File name: SafeProtect.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
SetupFrame.dll File name: SetupFrame.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
SmartBalance.dll File name: SmartBalance.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Support.dll File name: Support.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
TrayFrame.dll File name: TrayFrame.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
UninstallFrame.dll File name: UninstallFrame.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
UninstDelete.exe File name: UninstDelete.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Update.dll File name: Update.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
UpdateHost.exe File name: UpdateHost.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Upgrade.dll File name: Upgrade.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Utility.dll File name: Utility.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Web.dll File name: Web.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
WinService.dll File name: WinService.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
XBus.dll File name: XBus.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
XProcessBus.dll File name: XProcessBus.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
XSkin.dll File name: XSkin.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
MPCDelete.exe File name: MPCDelete.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

File name without pathMPC AdCleaner.lnkMPC Cleaner.lnkMPC Desktop.lnkMPC_Setup[1].exeMPCSetup_1.exeRegexp file mask%WINDIR%\Prefetch\MPCPROTECTSERVICE.exe[RANDOM CHARACTERS].pf%WINDIR%\Prefetch\MPCTRAY.exe[RANDOM CHARACTERS].pf%WINDIR%\Prefetch\MPCTRAY64.exe[RANDOM CHARACTERS].pf%WINDIR%\System32\drivers\mpcbase.sys%WINDIR%\System32\Tasks\MPC AdCleanerHKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mpc.amSoftware\Microsoft\Internet Explorer\SearchScopes\{FDC320A9-B4B2-491E-B140-815C11613CB6}SOFTWARE\Microsoft\Tracing\MPCDesktop_RASAPI32SOFTWARE\Microsoft\Tracing\MPCDesktop_RASMANCSSOFTWARE\Microsoft\Tracing\MPCNews_RASAPI32SOFTWARE\Microsoft\Tracing\MPCNews_RASMANCSSOFTWARE\Microsoft\Tracing\MPCTray_RASAPI32SOFTWARE\Microsoft\Tracing\MPCTray_RASMANCSSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MPC AdCleanerSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MPC DesktopSOFTWARE\Microsoft\Windows\CurrentVersion\Ext\MPCInstalledSOFTWARE\MPC AdCleanerSOFTWARE\MPC DesktopSOFTWARE\Wow6432Node\Microsoft\Tracing\MPCDesktop_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\MPCDesktop_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\MPCTray_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\MPCTray_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\MPCInstalledSOFTWARE\Wow6432Node\MPCSOFTWARE\Wow6432Node\MPC AdCleanerSOFTWARE\Wow6432Node\MPC DesktopSYSTEM\ControlSet001\Enum\Root\LEGACY_MPCBASESYSTEM\ControlSet001\Enum\Root\LEGACY_MPCKPTSYSTEM\ControlSet001\services\MPCBaseSYSTEM\ControlSet001\services\MPCKptSYSTEM\ControlSet001\services\MPCProtectServiceSYSTEM\ControlSet002\Enum\Root\LEGACY_MPCBASESYSTEM\ControlSet002\Enum\Root\LEGACY_MPCKPTSYSTEM\ControlSet002\services\MPCBaseSYSTEM\ControlSet002\services\MPCKptSYSTEM\ControlSet002\services\MPCProtectServiceSYSTEM\CurrentControlSet\Enum\Root\LEGACY_MPCBASESYSTEM\CurrentControlSet\Enum\Root\LEGACY_MPCKPTSYSTEM\CurrentControlSet\services\MPCBaseSYSTEM\CurrentControlSet\services\MPCKptSYSTEM\CurrentControlSet\services\MPCProtectServiceHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}MPCMPC ADCLEANER

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\MPC%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\MPC AdCleaner%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\MPC Desktop%ALLUSERSPROFILE%\Start Menu\Programs\MPC%ALLUSERSPROFILE%\Start Menu\Programs\MPC AdCleaner%APPDATA%\Microsoft\Windows\Start Menu\Programs\MPC%APPDATA%\Microsoft\Windows\Start Menu\Programs\MPC AdCleaner%PROGRAMFILES%\MPC AdCleaner%PROGRAMFILES%\MPC Cleaner%PROGRAMFILES(x86)%\MPC AdCleaner%PROGRAMFILES(x86)%\MPC Cleaner%TEMP%\MPC%TEMP%\MPC AdCleaner%TEMP%\MPCOnline%appdata%\MCorp
Loading...