IP Clear Description

IP Clear is a fake security application used to trick unsuspecting users out of their money. Once the trial version of IP Clear is inside a system, it will display a fake system scan that will produce exaggerated results of numerous malware detections. This is done to convince a victim that his/her system is infected and the only solution is to purchase the “full version” of IP Clear. Do not fall for this scam; IP Clear is unable to detect or remove computer parasites.

Type: Rogue AntiSpyware Programs

How Can You Detect IP Clear?

IP Clear Removal Details

IP Clear has typically the following processes in memory:

• C:\Program Files\IpClear\IpClearFunc.dll
• C:\Program Files\IpClear\launcher.exe
• C:\Program Files\IpClear\IpClearBlk.dll
• C:\Program Files\IpClear\IpClearUp.exe
• C:\Program Files\IpClear\IpClear.exe
• C:\Program Files\IpClear\IpClearRes.dll
• C:\Program Files\IpClear\uninstall.exe

IP Clear creates the following files in the system:

• C:\Documents and Settings\{username}\Start Menu\Programs\IpClear\IPClear.lnk
• C:\Program Files\IpClear\data\Enc_ICCode.ss
• C:\Documents and Settings\{username}\Desktop\IpClear.lnk
• C:\Program Files\IpClear\searced.log
• C:\Documents and Settings\{username}\Start Menu\Programs\IpClear\IPClear.url

IP Clear creates the following registry entries:

• HKEY_CLASSES_ROOT\CLSID\{28061c93-feb1-4f98-af09-8fa604c6af1c}
• HKEY_CLASSES_ROOT\ipclearblk.ipclearbho.1
• HKEY_CLASSES_ROOT\Interface\{fdf5be9d-cc91-4b10-a228-99be40e8c7e1}
• HKEY_CLASSES_ROOT\ipclearblk.ipclearbho
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IpClear
• HKEY_CLASSES_ROOT\TypeLib\{a2cece03-4af3-4965-8c7c-99b3e13a5f65}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28061c93-feb1-4f98-af09-8fa604c6af1c}
• HKEY_CURRENT_USER\Software\IpClear

Important Article Disclaimer