Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for OneSafe PC Cleaner

- - - - -
Started by Metallica , Nov 01 2017 04:29 AM

  • Please log in to reply
No replies to this topic

#1
Metallica
Posted 01 November 2017 - 04:29 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is OneSafe PC Cleaner?

The Malwarebytes research team has determined that OneSafe PC Cleaner is a "system optimizer". These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
More information can be found on our Malwarebytes Labs blog.

How do I know if I am infected with OneSafe PC Cleaner?

This is how the main screen of the sytem optimizer looks:

main.png

You will find these icons in your taskbar, your startmenu, and on your desktop:

icons.png

and see this warning during install:

warning1.png

and this screen when you attempt to fix the "problems":

warning5.png

You may see this entry in your list of installed programs:

warning4.png

and this task in your list of Scheduled Tasks:

warning3.png

How did OneSafe PC Cleaner get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was downloaded by a fake online scanner:

scanner1.png

scanner3.png

How do I remove OneSafe PC Cleaner?

Our program Malwarebytes can detect and remove this potentially unwanted application.
  • Please download Malwarebytes to your desktop.
  • Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
  • Then click Finish.
  • Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
  • If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of OneSafe PC Cleaner?
  • No, Malwarebytes removes OneSafe PC Cleaner completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this system optimizer.

As you can see below the full version of Malwarebytes would have protected you against the OneSafe PC Cleaner installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png


and we block access to their domain and the online scanners:

protection2.png


Technical details for experts

You may see these entries in FRST logs:

 (Onesafe Software) C:\Program Files (x86)\OneSafe PC Cleaner\OSPCSchedule.exe
 (Onesafe Software) C:\Program Files (x86)\OneSafe PC Cleaner\OneSafePCCleaner.exe
 C:\Windows\System32\Tasks\OneSafe PC Cleaner Schedule
 C:\Users\{username}\Desktop\OneSafe PC Cleaner.lnk
 C:\Users\{username}\Documents\OneSafe PC Cleaner
 C:\Users\{username}\AppData\Roaming\OneSafe PC Cleaner
 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneSafe PC Cleaner
 C:\Program Files (x86)\OneSafe PC Cleaner

OneSafe PC Cleaner v5.1.2 (HKLM-x32\...\OneSafe PC Cleaner_is1) (Version: 5.1.2 - Avanquest Software)
Task: {71973F5B-3BFA-4E7A-95DA-6E6F981EC2E4} - System32\Tasks\OneSafe PC Cleaner Schedule => C:\Program Files (x86)\OneSafe PC Cleaner\OSPCSchedule.exe [2017-10-27] (Onesafe Software)
Alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\OneSafe PC Cleaner
       Adds the file Animation.gif"="11/9/2016 9:55 AM, 3965 bytes, A
       Adds the file Brazilian.ini"="10/24/2017 5:50 PM, 53893 bytes, A
       Adds the file Cookies.txt"="8/21/2017 12:43 PM, 443 bytes, A
       Adds the file Czech.ini"="10/24/2017 5:50 PM, 54984 bytes, A
       Adds the file Danish.ini"="10/24/2017 5:51 PM, 50491 bytes, A
       Adds the file Dutch.ini"="10/24/2017 5:51 PM, 53695 bytes, A
       Adds the file English.ini"="10/24/2017 5:51 PM, 47910 bytes, A
       Adds the file Finnish.ini"="10/24/2017 5:51 PM, 52353 bytes, A
       Adds the file French.ini"="10/24/2017 5:52 PM, 59268 bytes, A
       Adds the file German.ini"="10/24/2017 5:52 PM, 55766 bytes, A
       Adds the file Italian.ini"="10/24/2017 5:52 PM, 53346 bytes, A
       Adds the file Japanese.ini"="10/24/2017 5:55 PM, 68065 bytes, A
       Adds the file Norwegian.ini"="10/24/2017 5:52 PM, 49293 bytes, A
       Adds the file OneSafePCCleaner.chm"="12/20/2016 3:08 PM, 33162 bytes, A
       Adds the file OneSafePCCleaner.exe"="10/27/2017 2:51 PM, 7224808 bytes, A
       Adds the file OSPCSchedule.exe"="10/27/2017 2:51 PM, 4161000 bytes, A
       Adds the file Polish.ini"="10/24/2017 5:53 PM, 55268 bytes, A
       Adds the file Portuguese.ini"="10/24/2017 5:53 PM, 54768 bytes, A
       Adds the file RList.txt"="1/14/2016 11:30 AM, 1505 bytes, A
       Adds the file Russian.ini"="10/24/2017 5:53 PM, 76190 bytes, A
       Adds the file SList.db"="1/9/2016 3:04 PM, 1093632 bytes, A
       Adds the file SList.txt"="2/12/2017 4:34 PM, 79258 bytes, A
       Adds the file Spanish.ini"="10/24/2017 5:54 PM, 57531 bytes, A
       Adds the file sqlite3.dll"="4/12/2015 6:25 PM, 673521 bytes, A
       Adds the file Swedish.ini"="10/24/2017 5:54 PM, 50282 bytes, A
       Adds the file unins000.dat"="11/1/2017 9:23 AM, 33335 bytes, A
       Adds the file unins000.exe"="11/1/2017 9:22 AM, 1202385 bytes, A
    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneSafe PC Cleaner
       Adds the file Check updates.lnk"="11/1/2017 9:23 AM, 1163 bytes, A
       Adds the file Help.lnk"="11/1/2017 9:23 AM, 1135 bytes, A
       Adds the file OneSafe PC Cleaner on the Web.lnk"="11/1/2017 9:23 AM, 878 bytes, A
       Adds the file OneSafe PC Cleaner.lnk"="11/1/2017 9:23 AM, 1135 bytes, A
       Adds the file Uninstall OneSafe PC Cleaner.lnk"="11/1/2017 9:23 AM, 1095 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\OneSafe PC Cleaner\Backup
       Adds the file img2.png"="11/1/2017 9:23 AM, 9094 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\OneSafe PC Cleaner\Log
    Adds the folder C:\Users\{username}\AppData\Roaming\OneSafe PC Cleaner\Undo
    In the existing folder C:\Users\{username}\Desktop
       Adds the file OneSafe PC Cleaner.lnk"="11/1/2017 9:23 AM, 1117 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file OneSafe PC Cleaner Schedule"="11/1/2017 9:23 AM, 3274 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1]
       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\OneSafe PC Cleaner\OneSafePCCleaner.exe,0"
       "DisplayName"="REG_SZ", "OneSafe PC Cleaner v5.1.2"
       "DisplayVersion"="REG_SZ", "5.1.2"
       "EstimatedSize"="REG_DWORD", 14984
       "Inno Setup: App Path"="REG_SZ", "C:\Program Files (x86)\OneSafe PC Cleaner"
       "Inno Setup: Deselected Tasks"="REG_SZ", ""
       "Inno Setup: Icon Group"="REG_SZ", "OneSafe PC Cleaner"
       "Inno Setup: Language"="REG_SZ", "en"
       "Inno Setup: Selected Tasks"="REG_SZ", "desktopicon"
       "Inno Setup: Setup Version"="REG_SZ", "5.5.9 (u)"
       "Inno Setup: User"="REG_SZ", "{username}"
       "InstallDate"="REG_SZ", "20171101"
       "InstallLocation"="REG_SZ", "C:\Program Files (x86)\OneSafe PC Cleaner\"
       "MajorVersion"="REG_DWORD", 5
       "MinorVersion"="REG_DWORD", 1
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "Avanquest Software"
       "QuietUninstallString"="REG_SZ", ""C:\Program Files (x86)\OneSafe PC Cleaner\unins000.exe" /SILENT"
       "UninstallString"="REG_SZ", ""C:\Program Files (x86)\OneSafe PC Cleaner\unins000.exe""
       "VersionMajor"="REG_DWORD", 5
       "VersionMinor"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\OneSafe PC Cleaner]
       "AdsAntivirusLink"="REG_SZ", "http://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Antivirus_EN.htm"
       "AdsAntivirusName"="REG_SZ", "ZoneAlarm"
       "AdsBuyNowURL"="REG_SZ", "http://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Crossell_Buy_EN.htm"
       "AdsDownloadURL"="REG_SZ", "http://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Crossell_DL_EN.htm"
       "AfterInstallURL"="REG_SZ", "http://webtools.avanquest.com/redirect.cfm?redirectId=Avanquest/OneSafe_PC_Cleaner_Post_Install_EN_05.htm"
       "AntivirusNotifier"="REG_DWORD", 1
       "BackupDir"="REG_SZ", "C:\Users\{username}\AppData\Roaming\OneSafe PC Cleaner\Backup"
       "BuildID"="REG_SZ", "OneSafe_PC_Cleaner_EN"
       "BuyNowURL"="REG_SZ", "http://webtools.avanquest.com/redirect.cfm?redirectId=Avanquest/OneSafe_PC_Cleaner_Buy_EN_05.htm"
       "CacheNotifier"="REG_DWORD", 1
       "CacheSizeNotifier"="REG_DWORD", 500
       "CompilerVersion"="REG_SZ", "Oct2017"
       "CrashNotifier"="REG_DWORD", 1
       "CreationDate"="REG_SZ", "31/10/2017"
       "DiskNotifier"="REG_DWORD", 1
       "DisplayName"="REG_SZ", "OneSafe PC Cleaner"
       "ExitSP1"="REG_DWORD", 1
       "ExitSP2"="REG_DWORD", 1
       "HideAfterInstallURL"="REG_DWORD", 1
       "HomePageURL"="REG_SZ", "http://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Home_EN.htm"
       "InstallationDate"="REG_BINARY, ....
       "ItemsFixed"="REG_DWORD", 0
       "ItemsToFix"="REG_DWORD", 94
       "ItemsToPrivacyScan"="REG_SZ", "1111"
       "ItemsToRecoveryScan"="REG_SZ", "1111"
       "ItemsToRegistryScan"="REG_SZ", "1111111111"
       "Language"="REG_DWORD", 1
       "LastCleanExecuted"="REG_DWORD", 0
       "LastNotificationTime"="REG_BINARY, ....
       "LastScanCanceled"="REG_DWORD", 0
       "LastScanChecked"="REG_SZ", "1111011"
       "LastScanDate"="REG_BINARY, ....
       "LastScanFound"="REG_DWORD", 94
       "LastServerChecking"="REG_BINARY, ....
       "LastServerNotification"="REG_BINARY, ....
       "LastUpdateChecking"="REG_BINARY, ....
       "LogDir"="REG_SZ", "C:\Users\{username}\AppData\Roaming\OneSafe PC Cleaner\Log"
       "MemoryNotifier"="REG_DWORD", 1
       "MinFreeDiskSpace"="REG_DWORD", 10
       "MinFreeMemory"="REG_DWORD", 10
       "NewAppNotifier"="REG_DWORD", 1
       "NewToolbarNotifier"="REG_DWORD", 1
       "NLaunches"="REG_DWORD", 1
       "OnWinStartup"="REG_DWORD", 0
       "PartnerID"="REG_SZ", "ONESAFE"
       "Phones"="REG_DWORD", 1
       "PromoOffers"="REG_DWORD", 1
       "ProURL"="REG_SZ", "http://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Upsell_PRO_EN_V5.htm"
       "RenewURL"="REG_SZ", "http://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Renewal_EN_V5.htm"
       "s_Date"="REG_BINARY, ....
       "s_Mode"="REG_DWORD", 1
       "s_SmartDate"="REG_BINARY, ....
       "s_SmartEnabled"="REG_DWORD", 0
       "s_SmartMode"="REG_DWORD", 0
       "s_Time"="REG_BINARY, ....
       "sch_enabled"="REG_DWORD", 1
       "ServerNotifier"="REG_DWORD", 1
       "ShowErrorsInBuyNowLink"="REG_DWORD", 1
       "ShowRebootMessage"="REG_DWORD", 1
       "ShowRecycleBin"="REG_DWORD", 1
       "SizeToClean"="REG_SZ", "945.93 MB"
       "SizeToCleanInt"="REG_DWORD", 946
       "StartupNotifier"="REG_DWORD", 1
       "SupportURL"="REG_SZ", "http://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Support_EN.htm"
       "UndoDir"="REG_SZ", "C:\Users\{username}\AppData\Roaming\OneSafe PC Cleaner\Undo"
       "UninstallNotifier"="REG_DWORD", 1
       "UninstallURL"="REG_SZ", "http://webtools.avanquest.com/redirect.cfm?redirectId=Avanquest/OneSafe_PC_Cleaner_UI_EN_05.htm"
       "UpdateReminderDisabled"="REG_DWORD", 0
       "UpgradeID"="REG_SZ", "EN_OSPCC_EN"
       "UseAds"="REG_DWORD", 1
       "UseExclusions"="REG_DWORD", 1
       "Version"="REG_SZ", "5.1.2"
Malwarebytes log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 11/1/17
Scan Time: 9:40 AM
Log File: 4cc47eb1-bee0-11e7-9364-080027750297.json
Administrator: Yes

-Software Information-
Version: 3.2.2.2018
Components Version: 1.0.212
Update Package Version: 1.0.3148
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 332156
Threats Detected: 54
Threats Quarantined: 54
Time Elapsed: 2 min, 14 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 2
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\OneSafePCCleaner.exe, Quarantined, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\OSPCSchedule.exe, Quarantined, [2947], [178756],1.0.3148

Module: 3
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\OneSafePCCleaner.exe, Quarantined, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\OSPCSchedule.exe, Quarantined, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\sqlite3.dll, Quarantined, [2947], [178756],1.0.3148

Registry Key: 4
PUP.Optional.OneSafePCCleaner, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OneSafe PC Cleaner_is1, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{71973F5B-3BFA-4E7A-95DA-6E6F981EC2E4}, Delete-on-Reboot, [2947], [375729],1.0.3148
PUP.Optional.OneSafePCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\OneSafe PC Cleaner Schedule, Delete-on-Reboot, [2947], [234465],1.0.3148
PUP.Optional.OneSafePCCleaner, HKCU\SOFTWARE\OneSafe PC Cleaner, Delete-on-Reboot, [2947], [241369],1.0.3148

Registry Value: 1
PUP.Optional.OneSafePCCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{71973F5B-3BFA-4E7A-95DA-6E6F981EC2E4}|PATH, Delete-on-Reboot, [2947], [375729],1.0.3148

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 7
PUP.Optional.OneSafePCCleaner, C:\Users\{username}\AppData\Roaming\OneSafe PC Cleaner\Backup, Delete-on-Reboot, [2947], [178754],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Users\{username}\AppData\Roaming\OneSafe PC Cleaner\Undo, Delete-on-Reboot, [2947], [178754],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Users\{username}\AppData\Roaming\OneSafe PC Cleaner\Log, Delete-on-Reboot, [2947], [178754],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\USERS\{username}\APPDATA\ROAMING\ONESAFE PC CLEANER, Delete-on-Reboot, [2947], [178754],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\USERS\{username}\DOCUMENTS\ONESAFE PC CLEANER, Delete-on-Reboot, [2947], [178755],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\PROGRAM FILES (X86)\ONESAFE PC CLEANER, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\ONESAFE PC CLEANER, Delete-on-Reboot, [2947], [178757],1.0.3148

File: 37
PUP.Optional.OneSafePCCleaner, C:\USERS\{username}\DESKTOP\ONESAFE PC CLEANER.LNK, Delete-on-Reboot, [2947], [241367],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Users\{username}\AppData\Roaming\OneSafe PC Cleaner\Backup\img2.png, Delete-on-Reboot, [2947], [178754],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Users\{username}\Documents\OneSafe PC Cleaner\CookieExclusions.txt, Delete-on-Reboot, [2947], [178755],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Animation.gif, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Brazilian.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Cookies.txt, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Czech.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Danish.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Dutch.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\English.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Finnish.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\French.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\German.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Italian.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Japanese.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Norwegian.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\OneSafePCCleaner.chm, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\OneSafePCCleaner.exe, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\OSPCSchedule.exe, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Polish.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Portuguese.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\RList.txt, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Russian.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\SList.db, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\SList.txt, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Spanish.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\sqlite3.dll, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\Swedish.ini, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\unins000.dat, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\Program Files (x86)\OneSafe PC Cleaner\unins000.exe, Delete-on-Reboot, [2947], [178756],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneSafe PC Cleaner\Check updates.lnk, Delete-on-Reboot, [2947], [178757],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneSafe PC Cleaner\Help.lnk, Delete-on-Reboot, [2947], [178757],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneSafe PC Cleaner\OneSafe PC Cleaner on the Web.lnk, Delete-on-Reboot, [2947], [178757],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneSafe PC Cleaner\OneSafe PC Cleaner.lnk, Delete-on-Reboot, [2947], [178757],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneSafe PC Cleaner\Uninstall OneSafe PC Cleaner.lnk, Delete-on-Reboot, [2947], [178757],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\WINDOWS\SYSTEM32\TASKS\OneSafe PC Cleaner Schedule, Delete-on-Reboot, [2947], [375731],1.0.3148
PUP.Optional.OneSafePCCleaner, C:\USERS\{username}\DESKTOP\ONESAFE_PC_CLEANER_5.EXE, Delete-on-Reboot, [2947], [122326],1.0.3148

Physical Sector: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements

Back to Malware Removal Guides and Tutorials


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.