Remove CleanUp Antivirus (CleanUp Antivirus Removal)

March 11th, 2010 | by Alex |

CleanUp Antivirus Descriptions:

CleanUp Antivirus has descended from the same family as Security Antivirus. Similarly to most of the roguewares, CleanUp Antivirus gets to your PC as you don’t expect that. It can be that the infection is installed after you click to download an update for your PC, or just try some online scanner. In all cases, the fake anti-spyware application is only trying to convince you that you are in danger. Don’t ever believe in these hackers which only aim to steal your money.

If you notice any of the following symptoms on your PC, be sure that you need help to fix your computer:

• you keep getting warnings about the bunch of infections found;
• your computer is scanned by the unknown application which looks legible;
• the computer starts performing in a slow way;
• your browser homepage is changed to the purchase page of CleanUp Antivirus.

In case one of the features mentioned above start bothering you, be sure that this might be the infection. Do not ever trust these villains. CleanUp Antivirus is neither able to remove, not to detect any malicious files on your machine.

In order to remove CleanUp Antivirus manually, follow CleanUp Antivirus Manual Removal Instructions, or automatically detect the rogueware on your PC with Spyware Detection Utility.

Automatically Detect CLEANUP ANTIVIRUS – Download Spyware Detection Utility

CleanUp Antivirus Manual Removal Instructions:

Stop These CleanUp Antivirus Processes:
(Learn how to do this)
CleanUp Antivirus
PE.exe

Find and Delete These CleanUp Antivirus Files:
(Learn how to do this)
%Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\CleanUp Antivirus.lnk
%Documents and Settings%\[UserName]\Application Data\CleanUp Antivirus
%Documents and Settings%\All Users\Application Data\[randomsymbols]\
%Documents and Settings%\[UserName]\Application Data\CleanUp Antivirus\cookies.sqlite
%Documents and Settings%\[UserName]\Desktop\CleanUp Antivirus.lnk
%Documents and Settings%\[UserName]\Start Menu\CleanUp Antivirus.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\CleanUp Antivirus.lnk
%UserProfile%\Application Data\CleanUp Antivirus
%UserProfile%\Application Data\CleanUp Antivirus\cookies.sqlite
%UserProfile%\Application Data\CleanUp Antivirus\Instructions.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\CleanUp Antivirus.lnk
%UserProfile%\Desktop\CleanUp Antivirus.lnk
%UserProfile%\Recent\cb.tmp
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\DBOLE.dll
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\eb.tmp
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\FS.dll
%UserProfile%\Recent\grid.exe
%UserProfile%\Recent\pal.drv
%UserProfile%\Recent\pal.tmp
%UserProfile%\Recent\PE.exe
%UserProfile%\Recent\tempdoc.drv
%UserProfile%\Recent\tempdoc.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Recent\tjd.tmp
%UserProfile%\Start Menu\CleanUp Antivirus.lnk
%UserProfile%\Start Menu\Programs\CleanUp Antivirus.lnk

Remove These CleanUp Antivirus Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “CleanUp Antivirus”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “App/7.00195″
HKEY_CURRENT_USER\Software\CleanUp Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “CleanUp Antivirus”
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\CU345d.DocHostUIHandler
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=195&q={searchTerms}”
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List “C:\Documents and Settings\All Users\Application Data\345d567\CU345d.exe”
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List “C:\Documents and Settings\All Users\Application Data\345d567\CU345d.exe”

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=195&q={searchTerms}”

Automatically Detect CLEANUP ANTIVIRUS – Download Spyware Detection Utility