Search
Keyword: usoj_rovnix.pc
\is-R176I.tmp %User Temp%\is-R176I.tmp\_isetup %User Profile%\Application Data\PC Purifier %Program Files%\PC-Purifier %Start Menu%\Programs\PC Purifier %User Temp%\is-J7HVP.tmp %User Temp%\is-VQADG.tmp %User
\is-UE4HO.tmp %User Temp%\is-UE4HO.tmp\_isetup %Program Files%\PC Clean Plus %Start Menu%\Programs\PC Clean Plus %System Root%\Documents and Settings\Wilbert %User Profile%\Application Data\PC Clean Plus %User
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
\is-RSFM2.tmp %User Temp%\is-RSFM2.tmp\_isetup %Program Files%\PC Speedup-Pro %Program Files%\PC Speedup-Pro\x64 %Program Files%\PC Speedup-Pro\x86 %User Profile%\Application Data\PCSpeedupPro.net %User Profile%
\is-AUR6L.tmp %User Temp%\is-AUR6L.tmp\_isetup %Program Files%\Advanced PC Care %Program Files%\Advanced PC Care\x64 %Program Files%\Advanced PC Care\x86 %User Profile%\Application Data\Advancedpccare.com %User
HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run SPCCReminder = "%Program Files%\Secure PC Cleaner\SecurePCCleaner.exe -rem" HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run EMReminder
6.0; Windows NT 5.1; SV1; FunWebProducts; SIMBAR={271632A5-19BA-4EB9-9ECD-51E0E45262B6}; BTRS100092; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; InfoPath.2; FunWebProducts; .NET4.0C; .NET
\DOCUME~1\Wilbert %User Profile%\LOCALS~1 %User Temp%\nsl34.tmp %User Temp%\is-8QIPA.tmp %User Temp%\is-5LRP0.tmp %User Temp%\is-5LRP0.tmp\_isetup %Program Files%\PC Speed Maximizer %Start Menu%\Programs\PC
may be manually installed by a user. Installation This Potentially Unwanted Application drops the following files: %Application Data%\fire.txt %Program Files%\Master PC Cleaner on {Computer Name}
malicious sites. Installation This Potenitally Unwanted Application adds the following folders: %All Users Profile%\Start Menu\Programs\PC Clean Plus %Application Data%\Event Monitor %Application Data%\PC
unknowingly by users when visiting malicious sites. Installation This potentially unwanted application drops the following file(s)/component(s): %All User Profile%\Application Data\PC Cleaners\fixed.htm %All
file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation This Trojan creates the following folders: %User Profile%\Application Data\PC
and above %Windows%\Tasks\_UPDATES.job - Windows XP and below %System%\_UPDATES - Windows Vista and above %Application Data%\PerformerSoft\PC Performer\log_{date}.log %User Temp%\Perflib_Perfdata_
Application adds the following processes: "%System%\schtasks.exe" /Create /TN "Lavasoft PC Optimizer Schedule" /TR "\"%User Temp%\LPOLauncher.exe\"" /SC ONLOGON /RL HIGHEST /F Schtasks /Create /TN "Lavasoft PC
malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation This adware drops the following file(s)/component(s): %Application Data%\PC MightyMax 2012
/INSTOFFERRUN taskkill.exe /f /im PCCleanerLite.exe "schtasks" /Create /F /SC HOURLY /MO 3 /TN "skpVersionUpdate" /RL HIGHEST /TR "\"%Program Files%\Monterix\PC Cleaner\PCCleanerLite.exe\" /checkupdates
/SC HOURLY /MO 3 /TN "skpVersionUpdate" /RL HIGHEST /TR "\"%Program Files%\Monterix\PC Cleaner\PCCleanerM.exe\" /checkupdates "powershell" -Command "Set-ScheduledTask -TaskName 'skpVersionUpdate
"schtasks" /Create /F /SC ONLOGON /DELAY 0005:00 /TN "skpVersionUpdate" /RL HIGHEST /TR "\"%Program Files%\Monterix\PC Cleaner\PCCleanerM.exe\" /checkupdates "schtasks" /Run /TN "skpVersionUpdate" http://www.
"schtasks" /Create /F /SC HOURLY /MO 3 /TN "skpVersionUpdate" /RL HIGHEST /TR "\"%Program Files%\Monterix\PC Cleaner\PCCleanerM.exe\" /checkupdates "powershell" -Command "Set-ScheduledTask -TaskName
\PCCleanerInst_00000000.exe" /VERYSILENT /DENYINSP /INSTOFFERRUN taskkill.exe /f /im PCCleanerM.exe "schtasks" /Create /F /SC HOURLY /MO 3 /TN "skpVersionUpdate" /RL HIGHEST /TR "\"%Program Files%\Monterix\PC Cleaner