Deus Cleaner

23 November 2007 Unwanted Program 1 Comment

Deus Cleaner is a fake security application that must be manually downloaded and installed. The program is advertised through its own web site that present misleading promotion such as instant savings and huge discount for volume buyers. Deus Cleaner will be marketed in an unfair manner to attract victims to download the product. Once loaded, the fake security software will instantly recognized a number of Privacy Violations found on the system. This process will direct user to purchase full version in order to fix and resolve issues.

As stated, Deus Cleaner will enter the computer with user’s consent. It can be installed just as any software, only thing that differs is Deus Cleaner will not provide automatic removal. Its intention to stay resident until the registered version was purchased makes it a credible candidate to be tagged as rogue security application.

Avoid Deus Cleaner and do not purchase the program.

Screen Shot Image:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Deus Cleaner Removal Procedures

Deus Cleaner REMOVAL TOOL:
In order to completely remove the threat, click here to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected computer.
MANUAL REMOVAL PROCEDURE:
1. Press Ctrl+Alt+Del on keyboard to stop process associated to “Deus Cleaner”. When Windows Task Manager opens, go to Processes Tab and find and end the following process:
DCleaner.exe

2. You need to update your installed antivirus application to have the latest database.
3. Thoroughly scan the system and any detected threats must be removed. If removal is prohibited, it is best to quarantine the infected item. Manually locating and deleting of malicious files should also be performed. Please see files below that are related to Deus Cleaner Virus.
4. Registry entries created by Deus Cleaner must also be remove from the Windows system. Please refer below for entries associated to the rogue program. [how to edit registry]
5. Exit registry editor.
6. Get rid of Deus Cleaner start-up entry by going to Start > Run, type msconfig on the “Open” dialog box. A windows containing System Configuration Utility will be launched. Go to Startup tab and uncheck the following Start-up item(s):
DCleaner.exe

7. Click Apply and restart Windows.

Additional Useful Tools

Using Portable SuperAntiSpyware:
To thoroughly remove the virus, it is best to do a separate scan of another security program so that other infected files not detected by anti-virus application can be get rid as well. Click here to download and run SAS Portable Scanner.

Technical Details and Additional Information:

Malicious Files Added by Deus Cleaner
C:\Documents and Settings\All Users\Desktop\Deus Cleaner.lnk
%Program\Deus Cleaner\Deus Cleaner Help.lnk
%Program\Deus Cleaner\Deus Cleaner.lnk
%Program\Deus Cleaner\Uninstall Deus Cleaner.lnk
%ProgramFiles%\Deus Cleaner\config\DBInfo.ver
%ProgramFiles%\Deus Cleaner\DCleaner.exe
%ProgramFiles%\Deus Cleaner\DCUpdate.exe
%ProgramFiles%\Deus Cleaner\Help\DCHelpEng.chm
%ProgramFiles%\Deus Cleaner\SDmodul.dll
%ProgramFiles%\Deus Cleaner\unins000.exe

Deus Cleaner Registry Entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\”Deus Cleaner” = “”C:\Program Files\Deus Cleaner\DCleaner.exe” /s”