SystemCleanerPRO

31 December 2009 Rogue 0 Comment

SystemCleanerPRO, also called as System Cleaner PRO , will disguise as an anti-malware program to attract computer users from installing the unregistered version of it. Once SystemCleanerPRO is on the system, it will generate pop-up alerts and warning messages. It also tries to deceive users regarding security status of the computer by providing falsified threat detection. SystemCleanerPRO alarms user of detected viruses and threats that can be removed by acquiring the licensed version of this program.

In reality, threats identified by this rogue application are fabricated and do not really exists. To stop annoyances coming from SystemCleanerPRO fake alerts, you must delete the program from the PC. Having no Add/Remove components, this fake program cannot be easily get rid of. It will try to stick into the system until you are force to obtain the registration key. Accompanying Trojan will successfully block every possible resource that may be useful in removing SystemCleanerPRO.

Screen Shot Image:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Characteristics (Analysis)
SystemCleanerPRO is a misleading security application. The program requires manual download and installation. Unlike any other rogue, SystemCleanerPRO may not enter the system uninvited. Apart from that, everything is typical. This rogue application is created in the sole purpose of playing tricks to victims to lure them into acquiring the paid version. Its objective is to gain profit for developers who are behind the attack.

Added Registry Entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SystemCleanerPRO"
HKEY_CURRENT_USER\Software\AuxCo\SystemCleanerPRO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemCleanerPRO_is1

Associated Files and Folders:

C:\Program Files\SystemCleanerPRO
C:\Program Files\SystemCleanerPRO\killtask.bat
C:\Program Files\SystemCleanerPRO\sysclpro.exe
C:\Program Files\SystemCleanerPRO\unins000.dat
C:\Program Files\SystemCleanerPRO\unins000.exe
C:\Documents and Settings\All Users\Application Data\AuxCo
C:\Documents and Settings\All Users\Application Data\AuxCo\SystemCleanerPRO
C:\Documents and Settings\All Users\Application Data\AuxCo\SystemCleanerPRO\BASE
C:\Documents and Settings\All Users\Application Data\AuxCo\SystemCleanerPRO\DELETED
C:\Documents and Settings\All Users\Application Data\AuxCo\SystemCleanerPRO\SAVED
C:\Documents and Settings\All Users\Start Menu\Programs\SystemCleanerPRO\SystemCleanerPRO.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\SystemCleanerPRO\Uninstall SystemCleanerPRO.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\SystemCleanerPRO 

1. Temporarily Disable System Restore (Windows Me/XP). [how to]
2. Open your antivirus application and update the virus definition file. This method ensures that your antivirus program can detect even newer variants of SystemCleanerPRO

3. Start Windows in Safe Mode with Networking.
- From a power-off state, turn on the computer and press F8 on your keyboard repeatedly.
- Your computer will display Windows Advanced Boot Options menu. Please select Safe Mode with Networking.
- The system will now boot Windows and loads only necessary drivers and files.

4. Open your antivirus program and run a full system scan. After the scan, delete all infected items. If unable, better place them in quarantine. Once the scan is complete, please proceed with the next step.

Online Virus Scanner:

Another way to remove SystemCleanerPRO without the need to install additional antivirus application is to perform a thorough scan with free online virus scanner that can be found here or on websites of legitimate anti-virus and security provider.

5. Go to Online Virus Scanner list and run a virus scan. This may require plug-ins, add-on or Activex object, please install if you want to proceed with scan.
6. After completing the necessary download, your system is now ready for online virus scanning.
7. Select an option in which you can thoroughly scan the computer to make sure that it will find and delete entirely all infections not detected on previous scan.
8. Remove or delete all detected items.
9. When scanning is finished you may now restart the computer in normal mode.

Automatic Removal of SystemCleanerPRO

In order to completely remove the threat, click here to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.