Performance Optimizer

12 October 2007 Rogue 0 Comment

Performance Optimizer is a misleading application that will pop-up fake scan reports. Performance Optimizer can be manually installed with users knowledge when it pretend as a useful program coming from a remote server. Errors will be detected during the scan and prompt users to fix it using the licensed version of the program. This rogue software will also modify Internet browser that will redirect visitors to unwanted web pages.

Screen Shot Image:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Windows Vista

Technical Details and Additional Information:

What can Performance Optimizer do to infected computer?
- Report exaggerated system errors.
- Modify registry to run itself during Windows start-up.
- The program will create files and folders on the compromised system.

Malicious Files Added by Performance Optimizer
%UserProfile%\Start Menu\Programs\Performance Optimizer\Documentation\Documentation.lnk
%UserProfile%\Start Menu\Programs\Performance Optimizer\Documentation\ReadMe.doc.lnk
%UserProfile%\Start Menu\Programs\Performance Optimizer\Performance Optimizer Home Page.lnk
%UserProfile%\Start Menu\Programs\Performance Optimizer\Performance Optimizer.lnk
%UserProfile%\Start Menu\Programs\Performance Optimizer\Sellmosoft Home Page.lnk
%UserProfile%\Start Menu\Programs\Performance Optimizer\Uninstall Performance Optimizer.lnk
%ProgramFiles%\Performanceoptimizer (Free)\creader.exe
%ProgramFiles%\Performanceoptimizer (Free)\inst.imd
%ProgramFiles%\Performanceoptimizer (Free)\pcid.exe
%ProgramFiles%\Performanceoptimizer (Free)\PerfOpt.chm
%ProgramFiles%\Performanceoptimizer (Free)\PerfOpt.exe
%ProgramFiles%\Performanceoptimizer (Free)\Performance Optimizer Home Page.url
%ProgramFiles%\Performanceoptimizer (Free)\PoChk.exe
%ProgramFiles%\Performanceoptimizer (Free)\ReadMe.doc
%ProgramFiles%\Performanceoptimizer (Free)\Sellmosoft Home Page.url
%ProgramFiles%\Performanceoptimizer (Free)\sload.sbd
%ProgramFiles%\Performanceoptimizer (Free)\Tweaks\data001.reg
%ProgramFiles%\Performanceoptimizer (Free)\uninstpo.exe

Associated Windows Registry Entries:
HKEY_USERS\Software\Performanceoptimizer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Performance Optimizer (Trial version)
HKEY_LOCAL_MACHINE\SOFTWARE\Performanceoptimizer
HKEY_CURRENT_USER\Software\Sellmosoft\Performance Optimizer
HKEY_CURRENT_USER\Software\Sellmosoft\Performance Optimizer (Trial version)
HKEY_CURRENT_USER\Software\Sellmosoft Inc.
HKEY_LOCAL_MACHINE\SOFTWARE\Sellmosoft\Performance Optimizer (Trial version)

Performance Optimizer – Removal

Removing Performance Optimizer Manually:
1. If using Windows ME or XP, System Restore must be disabled to prevent the threat from restoring itself. [Windows XP System Restore]
2. Update the virus definitions.
3. Reboot Windows in SafeMode [how to]
4. Run a full system scan and clean/delete all infected file(s)
5. Delete/Modify any values added to the registry. [how to edit registry]
6. Exit registry editor and restart Windows.

Antivirus Tools

Manual removal provided on this page may or may not successfully remove Performance Optimizer. To completely get rid of the virus and other malicious software that may have been installed, we suggest running these tools.

Scan with Norton Power Eraser:
A free removal tool from Norton Antivirus was developed to remove unfamiliar threats without using the traditional AV signatures. Download the tool from this location and start scanning the computer for viruses.

Online Virus Scanner:
Another way to remove a virus from a computer without the need to install additional anti-virus application is to perform a thorough scan with free Online Virus Scanner that can be found here or on web sites of legitimate security software provider.