OpenCloud Security

4 September 2011 Rogue 0 Comment

OpenCloud Security belongs to a group of fake computer security product. Obviously, this bogus program is a mimic of OpenCloud Antivirus. These programs will deceive computer user with the issuance of fake alerts and messages once it gains access on the system. These alerts may serve as a ploy to persuade victims into obtaining what it calls full working version of OpenCloud Security. Nevertheless, believing what it projects will lead to needless acquisition of the fake program.

Generally, rogue software like OpenCloud Security can break into computer without your knowledge. It involves a Trojan to force itself into the system. Trojan can get deep into system folders without a complex method through software and security exploits. Once inside, the Trojan will alter Windows registry to allow OpenCloud Security to start on its own during Windows start-up. Next, bunch of notification floods the screen stating virus infection discovered on PC. Some examples are:

Warning! Infection found
Unwanted software (malware) or tracking cookies have been found during last scan. It is highly recommended to remove it from your computer.
Keylogger Zeus was detected and put in quarantine.
Keylogger Zeus is a very dangerous software used by criminals to steal personal data such as credit card information, access to banking accounts, passwords to social networks and e-mails.

Security Warning
Your computer continues to be infected with harmful viruses. In order to prevent permanent loss of your information and credit card data theft please activate your antivirus software. Click here to enable protection.

It is an urgent matter to remove OpenCloud Security to stop harming the computer. A good and reputable anti-malware tool can eliminate this menace at once. A good malware-blocking program also helps in restricting your access to bad web sites to avoid infection.

Screen Shot Image:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Added Registry Entries:

HKEY_CLASSES_ROOT\CLSID\{19090308-636D-4e9b-A1CE-A647B6F794BF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{19090308-636D-4e9b-A1CE-A647B6F794BF}

Associated Files and Folders:

%UserProfile%\Desktop\OpenCloud Security.lnk
%AppData%\OpenCloud Security
%AppData%\OpenCloud Security\OpenCloud Security.exe
%AppData%\OpenCloud Security\OpenCloud Security.ico
%AppData%\OpenCloud Security\sysl32.dll
%AppData%\OpenCloud Security\wf.conf
%StartMenu%\Programs\OpenCloud Security
%StartMenu%\Programs\OpenCloud Security\OpenCloud Security.lnk

Automatic Removal Procedure

This guide requires a tool called Malwarebytes' Anti-Malware. It is a free tool designed to eradicate various computer infections. MBAM scanner is distributed for free.

1. Download removal tool from this page and save it on your Desktop or any location on your PC.
2. When finish downloading, double-click on the file mbam-setup.exe to install the application.
3. Follow the prompts and install with default configuration.
4. Before the installation completes, you need to update the database.

5. Click Finish. Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
6. When update is finished please reboot your computer in Safe Mode.
- Press F8 repeatedly on your keyboard right before Windows logo begins to load.
- Windows Advanced Options menu will appear.
- Select Safe Mode.

7. If Windows is already on Safe Mode. Locate Malwarebytes' Anti-Malware icon and run. Select Perform full scan to check your computer thoroughly.
8. When scanning is finished click on Show Results.
9. Make sure that all detected threats are checked, click on Remove Selected. This will delete all files and registry entries that belongs to OpenCloud Security.
10. Restart your computer.

Note: If OpenCloud Security prevents mbam-setup.exe from downloading. Download the software from another computer. Renaming it to something like 'anything.exe' can help elude the malware.