How to Fix How to get rid of Cleanup Antivirus

# The article How to Fix How to get rid of Cleanup Antivirus is an article in Spyware Removal Instructions. Follow the 3 Steps to Free Scan your computer to remove all errors and virus here:

Your System Scan Results:
Scan Time: How to get rid of Cleanup Antivirus Problems: Detected
Operating System: ohter System Performance: Need to Optimized
Resolution: px Registry Errors: Detected
Browser: Unknow browser Danger Rating: High

Download Fix Tool Now

How to get rid of Cleanup Antivirus

Cleanup Antivirus information:

Cleanup Antivirus is a rogue from the same family as Virus Doctor. This rogue is promoted through the use of Trojans and fake online anti-malware scanners. When installed Cleanup Antivirus will be configured to start automatically when you log into Windows. When Cleanup Antivirus is installed it will also create numerous fake malware that will be detected as malware when the program scans your computer.

cleanup-antivirus

As you can see, you should not purchase this program regardless of what it may state. If you have already purchased the program, then please contact your credit card company and dispute the charges. Finally, please use the guide below to remove this infection and any related malware for free.

Automated Removal Instructions for the Cleanup Antivirus using Malwarebytes’Anti-Malware:

1. Reboot your computer, keep pressing F8 key and select “Safe Mode with Networking” with your arrow key. Press Enter key and your computer will boot in Safe Mode.

2. Download Malwarebytes’Anti-Malware (Download Link), (Malwarebytes’Anti-Malware information)install it and update its database to the latest. After that, reboot your computer to make Malwarebytes’Anti-Malware fully functional, repeat Step 1 into Safe Mode and run a full scan of your computer.

NOTE: If you have problem installing Malwarebytes’Anti-Malware Software, you can rename the installer to winlogon.exe or iexplore.exe. Then double click the program and follow the install steps.

ps:before rename Malwarebytes as other name,make file extention show first.

3. After the full scan finishes, click “Show Results” to make sure that your important data are not infected and removed. Ignore or select the scan result and click “Remove Selected” to remove the virus. Malwarebytes’Anti-Malware will pop up a log notepad and list all operations of this scan. You can save it if you like. Reboot your computer and let Malwarebytes’Anti-Malware delete all detected virus.

4. Download and install Regtweaker – registry cleaner to repair your corrupted registry.

Why should you need Regtweaker?

As we know, virus and Trojans make the computer malfunction by destroying and modifying the registry so that the computer will not run normally. After the virus and Trojans are removed, the registry is still destroyed or modified, so the computer still has problems. That’s why you need to repair the registry. Also, some virus and Trojans leave some DLL files in the registry and this will cause strange DLL errors and affect the computer performance.

To make your computer run as fast as before or much faster than before,
1.    Download and install Regtweaker.
2.    Run a full scan of your computer.
3.    Click “Repair Now” and repair all errors detected.

After these 3 easy steps, your computer will run much faster than before!

——————————————————————————————————————————————————————–

How to Get Rid of Cleanup Antivirus Manually !

Stop CleanUp Antivirus processes:

CU345d.exe
PE.exe

Remove CleanUp Antivirus registry values:

HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\CU345d.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=195&q={searchTerms}”
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=195&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PRS” = “http://127.0.0.1:27777/?inj=%ORIGINAL%”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “Library1.00195″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “CleanUp Antivirus”
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=195&q={searchTerms}”
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List “C:\Documents and Settings\All Users\Application Data\345d567\CU345d.exe”
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List “C:\Documents and Settings\All Users\Application Data\345d567\CU345d.exe”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”

Remove CleanUp Antivirus DLLs:

c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
%UserProfile%\Recent\DBOLE.dll
%UserProfile%\Recent\FS.dll

Delete CleanUp Antivirus files:

c:\Documents and Settings\All Users\Application Data\345d567\46.mof
c:\Documents and Settings\All Users\Application Data\345d567\CU345d.exe
c:\Documents and Settings\All Users\Application Data\345d567\CUA.ico
c:\Documents and Settings\All Users\Application Data\345d567\CUASys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\CUCAISTUA\CUEWA.cfg
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
%UserProfile%\Application Data\CleanUp Antivirus\cookies.sqlite
%UserProfile%\Application Data\CleanUp Antivirus\Instructions.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\CleanUp Antivirus.lnk
%UserProfile%\Desktop\CleanUp Antivirus.lnk
%UserProfile%\Recent\cb.tmp
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\eb.tmp
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\grid.exe
%UserProfile%\Recent\pal.drv
%UserProfile%\Recent\pal.tmp
%UserProfile%\Recent\PE.exe
%UserProfile%\Recent\tempdoc.drv
%UserProfile%\Recent\tempdoc.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Recent\tjd.tmp
%UserProfile%\Start Menu\CleanUp Antivirus.lnk
%UserProfile%\Start Menu\Programs\CleanUp Antivirus.lnk

Get rid of CleanUp Antivirus folders:

c:\Documents and Settings\All Users\Application Data\345d567\
c:\Documents and Settings\All Users\Application Data\345d567\BackUp\
c:\Documents and Settings\All Users\Application Data\345d567\CUASys\
c:\Documents and Settings\All Users\Application Data\345d567\Quarantine Items
c:\Documents and Settings\All Users\Application Data\CUCAISTUA\
%UserProfile%\Application Data\CleanUp Antivirus

Tags: , , , , ,

March 11th, 2010 | Fake Antispyware Software

Comments are closed.