What is CleanUp Antivirus

CleanUp Antivirus is a scam. It is a fake antivirus tool, which has been developed just to snatch money out of your pocket in the name of providing all-round security to your computer from online malware threats and malware.

But the facts are totally opposite. In fact CleanUp Antivirus itself is a malware, which enters your computer with the help of some trojans already present within your computer. Immediately after entering your computer, it takes control of it and displays a never-ending series of fake warning screens and alarm messages, all trying to scare you that your computer is full of virus and spyware.

Please do not fall in its trap and purchase its full licensed version.

You need to immediate remova CleanUp Antivirus from your computer and following steps might be useful in it.

Technical Details of CleanUp Antivirus

  • Full name: CleanUp Antivirus, CleanUp Antivirus
  • Date Appeared: Feb. 2010
  • Characteristic: Rogue security program
  • URL: hCleanUp Antivirus.com

Do I need to remove CleanUp Antivirus

You can yourself search your computer manually, but it is not recommended unless you are a tech-geek. To save time and effort, we recommend you to download a FREE Scanner.

> > > Download < < <

Free Scanner for CleanUp Antivirus

.

How to Uninstall CleanUp Antivirus scam

The best way for the removal of CleanUp Antivirus is to install a good quality Anti-spyware Program and scan your system for any infections.

Automatic removal of CleanUp Antivirus is always good and complete as compared to any attempts to manually remove it, which may sometime lead to erroneous results. If you are not completely aware of all the files and registry entries used by this rogue anti-spyware, then we do not recommend you to attempt for the manual removal of CleanUp Antivirus.

Instructions to get rid of CleanUp Antivirus

If you really want to remove the CleanUp Antivirus infection on your system manually then proceed as follows.

Step 1: Kill the CleanUp Antivirus ProcessesLearn how to do that

CU345d.exe
PE.exe

Step 2: Remove CleanUp Antivirus files, folders and all associated CleanUp Antivirus DLL files:Learn how to do that

c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
%UserProfile%\Recent\DBOLE.dll
%UserProfile%\Recent\FS.dll

c:\Documents and Settings\All Users\Application Data\345d567\46.mof
c:\Documents and Settings\All Users\Application Data\345d567\CU345d.exe
c:\Documents and Settings\All Users\Application Data\345d567\CUA.ico
c:\Documents and Settings\All Users\Application Data\345d567\CUASys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\CUCAISTUA\CUEWA.cfg
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
%UserProfile%\Application Data\CleanUp Antivirus\cookies.sqlite
%UserProfile%\Application Data\CleanUp Antivirus\Instructions.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\CleanUp Antivirus.lnk
%UserProfile%\Desktop\CleanUp Antivirus.lnk
%UserProfile%\Recent\cb.tmp
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\eb.tmp
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\grid.exe
%UserProfile%\Recent\pal.drv
%UserProfile%\Recent\pal.tmp
%UserProfile%\Recent\PE.exe
%UserProfile%\Recent\tempdoc.drv
%UserProfile%\Recent\tempdoc.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Recent\tjd.tmp
%UserProfile%\Start Menu\CleanUp Antivirus.lnk
%UserProfile%\Start Menu\Programs\CleanUp Antivirus.lnk

c:\Documents and Settings\All Users\Application Data\345d567\
c:\Documents and Settings\All Users\Application Data\345d567\BackUp\
c:\Documents and Settings\All Users\Application Data\345d567\CUASys\
c:\Documents and Settings\All Users\Application Data\345d567\Quarantine Items
c:\Documents and Settings\All Users\Application Data\CUCAISTUA\
%UserProfile%\Application Data\CleanUp Antivirus

Step 3: Uninstall CleanUp Antivirus registry entries: Learn how to do that

HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\CU345d.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=195&q={searchTerms}”
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=195&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PRS” = “http://127.0.0.1:27777/?inj=%ORIGINAL%”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “Library1.00195″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “CleanUp Antivirus”
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=195&q={searchTerms}”
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List “C:\Documents and Settings\All Users\Application Data\345d567\CU345d.exe”
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List “C:\Documents and Settings\All Users\Application Data\345d567\CU345d.exe”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”

Free Scan for CleanUp Antivirus