PC Clean Pro

PC Clean Pro Description

ScreenshotESG security researchers have issued a warning against the fake defragmenter and system optimization utility PC Clean Pro. This application is advertised as a computer system optimizer, but is really a rogue defragmenter designed to take over your computer system and to steal your money. Do not become a victim of PC Clean Pro; protect your computer system with a legitimate anti-malware program and only download security software and system optimizers from trusted, reliable and well-established manufacturers.

PC Clean Pro Has a Strong Online Presence


There is a constant arms race between malware analysts and malware creators. There will always necessarily be a gap between the time it takes for PC security analysts to determine that a particular application is malicious and the time it is released. Criminals take advantage of this by creating numerous clones of dangerous software and releasing large batches of them, intended to infect as many users as possible before their program is ousted as malware and removed from legitimate software websites and search engines. As of the writing of this report, PC Clean Pro still appears on Google search results. Despite its positive reviews, ESG security researchers have determined that PC Clean Pro has no real defragmenter functions, but is merely enacting a scam designed to steal your money.

How Criminals Profit from PC Clean Pro


The PC Clean Pro scam is not particularly complicated. Basically, this program will offer to clean up your computer system by optimizing your registry and defragmenting your hard drives. Typically, PC Clean Pro runs a fake scan of the victim's hard drive, finding several possible problems. Using alarming language, multiple error messages, and fake system alerts, PC Clean Pro attempts to make its victim panic by claiming that the victim's computer has severe problems. Of course, PC Clean Pro will not remove these imaginary problems unless the victim first pays for a useless 'full version' of PC Clean Pro. Once the money is paid, PC Clean Pro will remain on your computer system and, since the problems PC Clean Pro detected were either imaginary or caused by PC Clean Pro in the first place, you will have become a victim of a common online scam.
Aliases: Trojan.Win32.GabPath.qermz [NANO-Antivirus], Trojan/W32.Agent.421888.OL [nProtect], Adware.Gabpath [Malwarebytes], a variant of Win32/Adware.GabPath.DL [ESET-NOD32], Adware.YA [Norman], TROJ_GEN.R4FH1L5 [TrendMicro-HouseCall], Win32:Gabpath-PQ [Adw] [Avast], Win.Adware.Gaba-24 [ClamAV], Application.Generic.394706 (B) [Emsisoft], Trojan.Agent.tnzf [CAT-QuickHeal], Generic.dx!bfpr [McAfee], Trojan/Agent.tnzf [TheHacker], W32/Suspicious_Gen4.AXBSB [Norman], TROJ_SPNR.11I112 [TrendMicro-HouseCall] and Trojan.Agent!6/PCS5Iy+SQ [Agnitum].

Infected with PC Clean Pro? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect PC Clean Pro

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Screenshots & Other Imagery

PC Clean Pro Image 1 PC Clean Pro Image 2

File System Details

PC Clean Pro creates the following file(s):
# File Name Size MD5 Detection Count
1 %APPDATA%\Microsoft\Windows\AdvService.exe 421,888 a7bcc54ebef08f42556c75419279c438 85
2 %WINDIR%\system32\config\systemprofile\AppData\Local\luposde.dll 10,752 ecabb2a80c35fbc8fe735c15f0ef880f 69
3 E:\SoftonicDownloader_para_windows-live-messenger.exe 287,048 cccbe65b731d494c9cd8709332f1df06 34
4 %USERPROFILE%\bungusninpig.exe 35,792 a3f5e376403d2b8fd518a4d4829ca561 18
5 %LOCALAPPDATA%\RemEngine\Mozilla\oyljjw.dll 425,984 78f95607a9a2e4f31c056a3bad5eb881 17
6 %LOCALAPPDATA%\Eastman Kodak Company\Diagnostics\mkfuiav.dll 286,720 dba5ef66e04391aae40a093fd79e0a4b 13
7 %APPDATA%\niratinqcrimwtndhcr.exe 1,047,552 1a2f3990dae88a2cee028a34af220726 9
8 %APPDATA%\system\winlogon.exe 132,608 6cf90a0eafd7f42fcef61373e2055e87 6
9 %TEMP%\winlogin .exe 444,928 6d3cc8eb709f8e2b7ffa165e7dab4eaf 5
10 %APPDATA%\msconfig.dat 101,888 6e396ecec4c04326b75b38fa677402ed 3
11 %SystemDrive%\win32\7D3B99B5F25.exe 181,364 63c06ea33978914c213c7e30937f2f1c 2
12 %USERPROFILE%\api-ms-win-servlcph.exe 161,792 7185e4de67695ad040575c12d5688a09 2
13 %USERPROFILE%\comsec.exe 260,914 0db174d6678c00d889bf7f04123f77cd 2
14 %USERPROFILE%\conpols.exe 308,736 ec62e125c6f1b8dfa9e7312d21102092 2
15 %USERPROFILE%\dotras.exe 410,112 d97935fd4af45dd39193c418f475c743 2

More files

Registry Details

PC Clean Pro creates the following registry entry or registry entries:
HKEY..\..\{Value}
SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved, value: {746950A1-9939-44C9-99AE-E46A673315FA}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}
PC Clean Pro
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
PC Clean Pro
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{746950A1-9939-44C9-99AE-E46A673315FA}

More Details on PC Clean Pro

The following cookies were found:
  • pc-cleanpro

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 5 + 8 ?