Cleaner 2009 Description

 

 

[+] Click Image to Enlarge

 

 

CartCartCart

Cleaner 2009 (or Cleaner2009) is another in the long line of rogue anti-spyware applications attempting to steal your money through aggressive advertising and scare tactics. Cleaner2009 performs system scans that show false positives and exaggerated spyware results. Though Cleaner 2009 attempts to appear legitimate, it is not a program you want to have on your computer. It is both a waste of time and most importantly, money.

Cleaner 2009 prompts you with numerous warning messages and popups that state Cleaner2009 has detected spyware on your PC. Clearn2009 then bombards you with advertisements suggesting you purchase the full version of the Cleaner2009 application. The Cleaner 2009 program may be difficult to remove manually, as popular rogue anti-spyware applications like Cleaner2009 are continually reskinned and renamed to confused unsuspecting computer users.

Type: Rogue AntiSpyware Programs

How Can You Detect Cleaner 2009?

Cleaner 2009 Technical Report

As new Cleaner 2009 details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Cleaner 2009 files with its MD5s were created in the system:

Cleaner 2009 has typically the following processes in memory:

• c:\Program Files\Cleaner2009 Freeware\IEViewer.exe
• c:\Program Files\Cleaner2009 Freeware\msvcr71.dll
• %UserProfile%\Local Settings\Application Data\qip\iercpt.dll
• QuickInstallPack.exe
• iercpt.dll
• c:\Program Files\Cleaner2009 Freeware\unins000.exe
• c:\Program Files\Cleaner2009 Freeware\msvcp71.dll
• c:\Program Files\Cleaner2009 Freeware\UCLN.exe
• CLN_2009FreeSetup.exe
• CLN_2009FreeInstall[1].exe
• c:\Program Files\Cleaner2009 Freeware\atl71.dll
• c:\Program Files\Cleaner2009 Freeware\mfc71.dll
• c:\Program Files\Cleaner2009 Freeware\UserAgent.dll
• %UserProfile%\Local Settings\Application Data\qip\QuickInstallPack.exe
• UCLN.exe
• CLN_2009FreeInstall.exe

Cleaner 2009 created the following directories, files, paths:

• %ProgramFiles%\Cleaner2009 Freeware
• %AllUsersProfile%\Application Data\Cleaner2009 Freeware
• %UserProfile%\Start Menu\Programs\QuickInstallPack
• %AllUsersProfile%\Application Data\Cleaner2009
• %AllUsersProfile%\Start Menu\Programs\Cleaner2009 Freeware
• %AppData%\Cleaner2009
• %AppData%\Cleaner2009 Freeware

Cleaner 2009 creates the following registry entries:

• HKEY_CLASSES_ROOT\iercpt.iercptbho.1
• HKEY_CLASSES_ROOT\CLSID\{D4CDC21D-43BE-4101-A1EF-E379F134771E}
• HKEY_LOCAL_MACHINE\SOFTWARE\Cleaner2009 Freeware
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “QuickInstallPack”
• D4CDC21D-43BE-4101-A1EF-E379F134771E
• AppID\iercpt.DLL
• 59C345BA-3D5E-44E3-9D10-D3848AF15D73
• HKEY_CLASSES_ROOT\iercpt.iercptbho
• HKEY_CLASSES_ROOT\AppID\{3A9377A6-BE7F-485D-908C-D44114691389}
• HKEY_CLASSES_ROOT\TypeLib\{A6FBD2E4-1C7E-4EAB-80DD-01DE2645566A}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QuickInstallPack
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4CDC21D-43BE-4101-A1EF-E379F134771E}
• AppID\3A9377A6-BE7F-485D-908C-D44114691389
• iercpt.iercptbho.1
• Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Cleaner2009 Freeware
• HKEY_CURRENT_USER\Software\Cleaner2009 Freeware
• HKEY_CLASSES_ROOT\AppID\iercpt.DLL
• HKEY_CLASSES_ROOT\Interface\{59C345BA-3D5E-44E3-9D10-D3848AF15D73}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\UCLN_install_is1
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Cleaner2009 Freeware”
• Cleaner2009 Freeware
• iercpt.iercptbho
• A6FBD2E4-1C7E-4EAB-80DD-01DE2645566A

Important Article Disclaimer