OpenCloud Antivirus

1 September 2011 Rogue 0 Comment

Rogue security application called OpenCloud Antivirus is definitely a dangerous one to mark its name on computer security world. OpenCloud Antivirus is actually a virus in disguise of protection software making it to be acceptable to Internet users by means of fake online virus scanner web sites. It may take a spot on victim’s computer by seeking help of Trojan able to penetrate the system undetected. When this malicious application is installed, it begins to imitate Windows pop-up warnings with own messages which are all unreliable. Declaring presence of malware threats and security risks is the core foundation to catch attention of every computer users. As a matter of fact, wide-spread of OpenCloud Antivirus virus is not an entirely new case. The unwanted application came from the unpopular group of useless antivirus program. Similar graphical user interfaces (GUI) are used and only noticeable changes are names that read to be persuasive.

OpenCloud Antivirus may still penetrate a computer even with utmost defense. Sophisticated contamination technology is applied to conceal its existence on the compromised machine. In fact, OpenCloud Antivirus will cleverly render security programs unusable on target computers. Thus, subsequent attack is simplified by primary actions assuring succeeding associated virus to pass through naturally.

It is necessary to eliminate OpenCloud Antivirus immediately. Having the registered version of the exact advertised program is unnecessary to bring solution to computer problems. Focus on using widely accepted antivirus programs that efficiently remove rogue programs including OpenCloud Antivirus.

Screen Shot Image:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

OpenCloud Antivirus Removal Procedures

OpenCloud Antivirus REMOVAL TOOL:
Efficient and complete removal of OpenCloud Antivirus can be provided by Malwarebytes Anti-Malware. Download the program from this location. If downloading is blocked by a virus, use a clean computer and save it to a Disc or USB drive and execute the removal on infected machine.

MANUAL REMOVAL:
1. Unload any running OpenCloud Antivirus process by pressing Ctrl+Alt+Del on your keyboard. This will open Task Manager. Look for the following process and click “End Process”:
OpenCloud Antivirus.exe

2. If antivirus program Is installed, connect to Internet and update it to have the latest database and pattern files.
3. Thoroughly scan the computer and clean/delete all infected files. See lists of OpenCloud Antivirus associated files below.
4. Edit Windows registry and delete malicious entries as stated below. [how to edit registry]
5. Close registry editor, changes will be save automatically.
6. Remove OpenCloud Antivirus start-up entry by going to Start > Run, type msconfig on the “Open” dialog box. System Configuration Utility will open. Go to Startup tab and uncheck the following Startup item(s):
OpenCloud Antivirus.exe

7. Click on Apply and reboot the computer for changes to take effect.

Additional Useful Tools

Using Portable SuperAntiSpyware:
To thoroughly remove the virus, it is best to do a separate scan of another security program so that other infected files not detected by anti-virus application can be get rid as well. Click here to download and run SAS Portable Scanner.

Technical Details and Additional Information:

OpenCloud-Antivirus existence on the computer is the cause of infinite annoyances and disturbance. Extremely inappropriate pop-up alerts, together with warning messages fill the screen while operating Windows. Some of these will contain the following messages.

Warning! Infection found
Unauthorized sending E-MAIL with subject “RE:” to <fake email here> was CANCELLED.

Windows Security Alert
To help protect your computer, Windows Firewall has blocked some features of this program.
Do you want to keep blocking this program?
Name: Zeus Trojan
Publisher: Unauthorized

Warning: Infection is Detected
Windows has found spyware infection on your computer!
Click here to update your Windows antivirus software

Malicious Files Added by OpenCloud Antivirus
%UserProfile%\Desktop\OpenCloud Antivirus.lnk
%AppData%\OpenCloud Antivirus
%AppData%\OpenCloud Antivirus\OpenCloud Antivirus.exe
%AppData%\OpenCloud Antivirus\OpenCloud Antivirus.ico
%AppData%\OpenCloud Antivirus\sysl32.dll
%AppData%\OpenCloud Antivirus\wf.conf
%StartMenu%\Programs\OpenCloud Antivirus
%StartMenu%\Programs\OpenCloud Antivirus\OpenCloud Antivirus.lnk

File Location for Windows Versions:

• %UserProfile% for Vista/7 user is C:\Users\<Current User> for Windows Vista/7, for Windows XP/2000 this is C:\Documents and Settings\<Current User>.
• %AppData% for Vista/7 refers to C:\Users\<Current User>\AppData\Roaming, while for Windows XP/2000 user it is C:\Documents and Settings\<Current User>\Application Data.

OpenCloud Antivirus Registry Entries:
HKEY_CLASSES_ROOT\CLSID\{19090308-636D-4e9b-A1CE-A647B6F794BF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{19090308-636D-4e9b-A1CE-A647B6F794BF}