Obrona Cleaner

By GoldSparrow in Potentially Unwanted Programs

Threat Scorecard

Threat Level:	10 % (Normal)
Infected Computers:	23

First Seen:	March 12, 2015
Last Seen:	June 27, 2021
OS(es) Affected:	Windows

The Obrona Cleaner program travels incorporated with freeware you download from the web and can be automatically installed on your PC via the 'Express' or 'Typical' option. The Obrona Cleaner software may appear as a helpful system optimizer, but you may be interested to know that security researchers classify it as a PUP. Obrona Cleaner is designed to notify users of critical system errors in order to convince users that they need to pay for a license that would allow them to repair their OS. The Obrona Cleaner may insert a task in Windows Task Scheduler to be run at regular intervals and to auto-start with Windows at every boot-up. Additionally, the Obrona Cleaner may use a browser extension to display ads in your web client just like the Obrona Blockads browser tool that blocks native ads and shows its commercials. Many users may want to remove the Obrona Cleaner with a reputable anti-spyware utility and search for a more user-friendly system optimizer.

Table of Contents

SpyHunter Detects & Remove Obrona Cleaner

File System Details

Obrona Cleaner may create the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%Desktop%\OBRONA Cleaner.lnk
Name: %Desktop%\OBRONA Cleaner.lnk Type: Shortcut Group: Malware file
2.	%LocalAppData%\Obrona Cleaner\application.log
Name: %LocalAppData%\Obrona Cleaner\application.log Group: Malware file
3.	%LocalAppData%\Obrona Cleaner\imageformats\
Name: %LocalAppData%\Obrona Cleaner\imageformats\ Group: Malware file
4.	%LocalAppData%\Obrona Cleaner\imageformats\qgif.dll
Name: %LocalAppData%\Obrona Cleaner\imageformats\qgif.dll Type: Dynamic link library Group: Malware file
5.	%LocalAppData%\Obrona Cleaner\imageformats\qico.dll
Name: %LocalAppData%\Obrona Cleaner\imageformats\qico.dll Type: Dynamic link library Group: Malware file
6.	%LocalAppData%\Obrona Cleaner\install.log
Name: %LocalAppData%\Obrona Cleaner\install.log Group: Malware file
7.	%LocalAppData%\Obrona Cleaner\libeay32.dll
Name: %LocalAppData%\Obrona Cleaner\libeay32.dll Type: Dynamic link library Group: Malware file
8.	%LocalAppData%\Obrona Cleaner\msvcp100.dll
Name: %LocalAppData%\Obrona Cleaner\msvcp100.dll Type: Dynamic link library Group: Malware file
9.	%LocalAppData%\Obrona Cleaner\msvcr100.dll
Name: %LocalAppData%\Obrona Cleaner\msvcr100.dll Type: Dynamic link library Group: Malware file
10.	%LocalAppData%\Obrona Cleaner\ObronaCleaner.exe
Name: %LocalAppData%\Obrona Cleaner\ObronaCleaner.exe Type: Executable File Group: Malware file
11.	%LocalAppData%\Obrona Cleaner\OpenHardwareMonitorConsole\OpenHardwareMonitorConsole.exe
Name: %LocalAppData%\Obrona Cleaner\OpenHardwareMonitorConsole\OpenHardwareMonitorConsole.exe Type: Executable File Group: Malware file
12.	%LocalAppData%\Obrona Cleaner\OpenHardwareMonitorConsole\OpenHardwareMonitorLib.dll
Name: %LocalAppData%\Obrona Cleaner\OpenHardwareMonitorConsole\OpenHardwareMonitorLib.dll Type: Dynamic link library Group: Malware file
13.	%LocalAppData%\Obrona Cleaner\platforms\qwindows.dll
Name: %LocalAppData%\Obrona Cleaner\platforms\qwindows.dll Type: Dynamic link library Group: Malware file
14.	%LocalAppData%\Obrona Cleaner\Qt5Core.dll
Name: %LocalAppData%\Obrona Cleaner\Qt5Core.dll Type: Dynamic link library Group: Malware file
15.	%LocalAppData%\Obrona Cleaner\Qt5Gui.dll
Name: %LocalAppData%\Obrona Cleaner\Qt5Gui.dll Type: Dynamic link library Group: Malware file
16.	%LocalAppData%\Obrona Cleaner\Qt5Network.dll
Name: %LocalAppData%\Obrona Cleaner\Qt5Network.dll Type: Dynamic link library Group: Malware file
17.	%LocalAppData%\Obrona Cleaner\Qt5Sql.dll
Name: %LocalAppData%\Obrona Cleaner\Qt5Sql.dll Type: Dynamic link library Group: Malware file
18.	%LocalAppData%\Obrona Cleaner\Qt5Widgets.dll
Name: %LocalAppData%\Obrona Cleaner\Qt5Widgets.dll Type: Dynamic link library Group: Malware file
19.	%LocalAppData%\Obrona Cleaner\sigar-x86-winnt.dll
Name: %LocalAppData%\Obrona Cleaner\sigar-x86-winnt.dll Type: Dynamic link library Group: Malware file
20.	%LocalAppData%\Obrona Cleaner\SkipUAC.exe
Name: %LocalAppData%\Obrona Cleaner\SkipUAC.exe Type: Executable File Group: Malware file
21.	%LocalAppData%\Obrona Cleaner\soundOnScanFinished.wav
Name: %LocalAppData%\Obrona Cleaner\soundOnScanFinished.wav Group: Malware file
22.	%LocalAppData%\Obrona Cleaner\ssleay32.dll
Name: %LocalAppData%\Obrona Cleaner\ssleay32.dll Type: Dynamic link library Group: Malware file
23.	%LocalAppData%\Obrona Cleaner\startupTime.exe
Name: %LocalAppData%\Obrona Cleaner\startupTime.exe Type: Executable File Group: Malware file
24.	%LocalAppData%\Obrona Cleaner\Uninstaller.exe
Name: %LocalAppData%\Obrona Cleaner\Uninstaller.exe Type: Executable File Group: Malware file
25.	%StartMenu%\Programs\OBRONA Cleaner\OBRONA Cleaner.lnk
Name: %StartMenu%\Programs\OBRONA Cleaner\OBRONA Cleaner.lnk Type: Shortcut Group: Malware file
26.	%System%\Tasks\ObronaCleanerUacSkip
Name: %System%\Tasks\ObronaCleanerUacSkip Group: Malware file
27.	%System%\Tasks\Startup Time Check
Name: %System%\Tasks\Startup Time Check Group: Malware file

Registry Details

Obrona Cleaner may create the following registry entry or registry entries:

File name without path

OBRONA Cleaner.lnk

HKEY..\..\{Value}

HKEY_CURRENT_USER \Software\Microsoft\Windows\CurrentVersion\Run\Obrona Cleaner "%LocalAppData%\Obrona Cleaner\ObronaCleaner.exe" –autorun

HKEY..\..\..\..{Subkeys}

HKEY_CURRENT_USER\Software\OBRONA

HKEY_CURRENT_USER \Software\OBRONA\Obrona Cleaner

HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E4131981-A8CD-48B6-A491-C62B3E6546D2}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ObronaCleanerUacSkip

HKEY_CURRENT_USER \Software\Microsoft\Windows\CurrentVersion\Uninstall\ObronaCleaner

Directories

Obrona Cleaner may create the following directory or directories:

%APPDATA%\Microsoft\Windows\Start Menu\Programs\OBRONA Cleaner

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Obrona Cleaner

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Obrona Cleaner

File System Details

Registry Details

Directories

Submit Comment

Trending

'YouPorn' Email Scam

Safe Search Eng

Findtheirreport.com

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen