Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for CompuClever PC TuneUp

- - - - -

  • Please log in to reply
No replies to this topic

#1
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is CompuClever PC TuneUp?

The Malwarebytes research team has determined that CompuClever PC TuneUp is a "system optimizer". These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
More information can be found on our Malwarebytes Labs blog.

How do I know if I am infected with CompuClever PC TuneUp?

This is how the main screen of the system optimizer looks:

main.png

You will find these icons in your taskbar, your startmenu, and on your desktop:

icons.png

and see this warning during install:

warning1.png

and these screens during "operations":

warning5.png

warning6.png

You may see this entry in your list of installed programs:

warning4.png

and these tasks in your list of Scheduled Tasks:

warning3.png

How did CompuClever PC TuneUp get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was downloaded from their website:

website.png

How do I remove CompuClever PC TuneUp?

Our program Malwarebytes can detect and remove this potentially unwanted application.
  • Please download Malwarebytes to your desktop.
  • Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
  • Then click Finish.
  • Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
  • If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of CompuClever PC TuneUp?
  • No, Malwarebytes removes CompuClever PC TuneUp completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this system optimizer.

As you can see below the full version of Malwarebytes would have protected you against the CompuClever PC TuneUp installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png


and we block access to their domain:

protection2.png


Technical details for experts

You may see these entries in FRST logs:

(CompuClever Systems Inc. -> CompuClever Systems Inc.) C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\ccmanagementservice.exe
(CompuClever Systems Inc. -> CompuClever) C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\ccpcc.exe
Task: {A4E7A8B0-48F0-4307-961A-7DC4A7A1C237} - System32\Tasks\CompuClever PC TuneUp Startup => C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\ccpcc.exe [13821672 2018-03-09] (CompuClever Systems Inc. -> CompuClever)
Task: {BE411E96-2BE2-459F-9A2A-2B44017B6B2B} - System32\Tasks\CompuClever PC TuneUp Manual Startup => C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\ccpcc.exe [13821672 2018-03-09] (CompuClever Systems Inc. -> CompuClever)
Task: {E0061115-1ED4-4A09-AB2A-B53798E5D98A} - System32\Tasks\CompuClever PC TuneUp Generate Reports => C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\ccpcc.exe [13821672 2018-03-09] (CompuClever Systems Inc. -> CompuClever)
R2 CCManagementService; C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\ccmanagementservice.exe [180688 2018-03-09] (CompuClever Systems Inc. -> CompuClever Systems Inc.)
S1 CompuCleverBootor; C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\Bootor64.sys [24208 2016-05-04] (CompuClever Systems Inc. -> <Compuclever>)
C:\Windows\System32\Tasks\CompuClever PC TuneUp Startup
C:\Windows\System32\Tasks\CompuClever PC TuneUp Generate Reports
C:\Windows\System32\Tasks\CompuClever PC TuneUp Manual Startup
C:\Users\{username}\Desktop\CompuClever PC TuneUp.lnk
C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CompuClever
C:\Users\{username}\AppData\Roaming\CompuClever
C:\Users\{username}\AppData\Local\CompuClever
C:\ProgramData\CompuClever
C:\Program Files (x86)\CompuClever
(CompuClever System Inc.) C:\Users\{username}\Desktop\compucleverpctuneup_setup.exe

CompuClever PC TuneUp (HKLM-x32\...\CompuClever PC TuneUp) (Version: 2.5.3.72 - CompuClever System Inc.)
Alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp
       Adds the file Bootor.sys"="5/4/2016 9:00 AM, 22160 bytes, A
       Adds the file Bootor64.sys"="5/4/2016 9:00 AM, 24208 bytes, A
       Adds the file ccpcc.exe"="3/9/2018 8:09 AM, 13821672 bytes, A
       Adds the file ccpcc_cs.exe"="3/9/2018 8:09 AM, 419112 bytes, A
       Adds the file chrome_encry.exe"="3/9/2018 8:10 AM, 1767680 bytes, A
       Adds the file CommonLib_MFC.dll"="3/9/2018 8:10 AM, 722504 bytes, A
       Adds the file ErrorReportSubmit.exe"="3/9/2018 8:09 AM, 909520 bytes, A
       Adds the file FixCenter.exe"="3/9/2018 8:09 AM, 962976 bytes, A
       Adds the file IERepair.exe"="3/9/2018 8:09 AM, 298080 bytes, A
       Adds the file imgdecoder-png.dll"="3/9/2018 8:11 AM, 145392 bytes, A
       Adds the file launcher.ccpccexe"="3/9/2018 8:10 AM, 86184 bytes, A
       Adds the file mfc120u.dll"="8/5/2016 8:42 AM, 4449952 bytes, A
       Adds the file Microsoft.VC120.CRT.manifest"="9/2/2015 9:23 AM, 481 bytes, A
       Adds the file msvcp120.dll"="9/2/2015 9:23 AM, 455328 bytes, A
       Adds the file msvcr120.dll"="9/2/2015 9:23 AM, 970912 bytes, A
       Adds the file NG_Mod_Browsers.dll"="3/9/2018 8:10 AM, 224296 bytes, A
       Adds the file NG_Mod_DiskDefrag.dll"="3/9/2018 8:10 AM, 652872 bytes, A
       Adds the file NG_Mod_InternetOpt.dll"="3/9/2018 8:10 AM, 99672 bytes, A
       Adds the file NG_Mod_JunkClean.dll"="3/9/2018 8:10 AM, 275704 bytes, A
       Adds the file NG_Mod_Privacy.dll"="3/9/2018 8:10 AM, 275704 bytes, A
       Adds the file NG_Mod_RegDefrag.dll"="3/9/2018 8:10 AM, 86120 bytes, A
       Adds the file NG_Mod_RegFix.dll"="3/9/2018 8:10 AM, 169816 bytes, A
       Adds the file NG_Mod_StartupMgr.dll"="3/9/2018 8:10 AM, 145392 bytes, A
       Adds the file NG_Mod_SysOpt.dll"="3/9/2018 8:11 AM, 117320 bytes, A
       Adds the file NG_Mod_Uninstaller.dll"="3/9/2018 8:11 AM, 106448 bytes, A
       Adds the file NG_Mod_WinUpdate.dll"="3/9/2018 8:11 AM, 1637904 bytes, A
       Adds the file render-gdi.dll"="3/9/2018 8:11 AM, 37392 bytes, A
       Adds the file SightOfUser.dll"="3/9/2018 8:11 AM, 273144 bytes, A
       Adds the file soui.dll"="3/9/2018 8:11 AM, 727232 bytes, A
       Adds the file soui-sys-resource.dll"="3/9/2018 8:11 AM, 113616 bytes, A
       Adds the file sqlite3.dll"="9/12/2016 5:39 AM, 586488 bytes, A
       Adds the file uninstall.exe"="9/13/2019 9:22 AM, 3713284 bytes, A
       Adds the file utilities.dll"="3/9/2018 8:11 AM, 90400 bytes, A
    Adds the folder C:\ProgramData\CompuClever\CompuClever PC TuneUp\Data
       Adds the file Rules.dat"="9/25/2017 5:52 AM, 41447 bytes, A
       Adds the file startuplist.dat"="2/17/2017 8:59 AM, 658054 bytes, A
       Adds the file unwanted_plugin.dat"="8/16/2016 8:01 AM, 174048 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\CompuClever\Program Management Console
       Adds the file ccmanagementservice.exe"="3/9/2018 7:50 AM, 180688 bytes, A
       Adds the file ccmanagementservice_gui.exe"="3/9/2018 7:51 AM, 446672 bytes, A
       Adds the file CommonLib_WTL.dll"="3/9/2018 7:51 AM, 813424 bytes, A
       Adds the file Microsoft.VC120.CRT.manifest"="9/2/2015 9:23 AM, 481 bytes, A
       Adds the file msvcp120.dll"="3/9/2018 7:51 AM, 459648 bytes, A
       Adds the file msvcr120.dll"="3/9/2018 7:51 AM, 982856 bytes, A
       Adds the file pmc.exe"="3/9/2018 7:50 AM, 729728 bytes, A
       Adds the file SightOfUser.dll"="3/9/2018 7:51 AM, 273144 bytes, A
       Adds the file uninstall.exe"="3/9/2018 7:51 AM, 246720 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp
       Adds the file HomeStateInfo.xml"="9/13/2019 9:24 AM, 1628 bytes, A
       Adds the file pcc.ini"="9/13/2019 9:24 AM, 225 bytes, A
       Adds the file PopupResultInfo.xml"="9/13/2019 9:24 AM, 1628 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\defragbackup
       Adds the file .DEFAULT_backup.hch"="9/13/2019 9:24 AM, 229376 bytes, A
       Adds the file COMPONENTS_backup.hch"="9/13/2019 9:24 AM, 58171392 bytes, A
       Adds the file S-1-5-19_backup.hch"="9/13/2019 9:24 AM, 245760 bytes, A
       Adds the file S-1-5-20_backup.hch"="9/13/2019 9:24 AM, 253952 bytes, A
       Adds the file S-1-5-21-1350903546-318028887-1286703239-1003_backup.hch"="9/13/2019 9:24 AM, 761856 bytes, A
       Adds the file S-1-5-21-1350903546-318028887-1286703239-1003_Classes_backup.hch"="9/13/2019 9:24 AM, 2297856 bytes, A
       Adds the file SAM_backup.hch"="9/13/2019 9:24 AM, 65536 bytes, A
       Adds the file SECURITY_backup.hch"="9/13/2019 9:24 AM, 24576 bytes, A
       Adds the file SOFTWARE_backup.hch"="9/13/2019 9:24 AM, 83443712 bytes, A
       Adds the file SYSTEM_backup.hch"="9/13/2019 9:24 AM, 11206656 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\log
       Adds the file 20190911-20190917.xml"="9/13/2019 9:24 AM, 3288 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\css
       Adds the file style.css"="9/25/2017 6:17 AM, 8732 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\html
       Adds the file index.htm"="9/29/2017 10:19 AM, 14007 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\js
       Adds the file jquery-1.11.1.min.js"="9/25/2017 6:17 AM, 95788 bytes, A
       Adds the file my_scripts.js"="9/25/2017 6:17 AM, 461 bytes, A
       Adds the file rgraph.common.core.js"="9/25/2017 6:17 AM, 84643 bytes, A
       Adds the file rgraph.common.dynamic.js"="9/25/2017 6:17 AM, 31548 bytes, A
       Adds the file rgraph.common.effects.js"="9/25/2017 6:17 AM, 73651 bytes, A
       Adds the file rgraph.common.key.js"="9/25/2017 6:17 AM, 28147 bytes, A
       Adds the file rgraph.common.tooltips.js"="9/25/2017 6:17 AM, 24149 bytes, A
       Adds the file rgraph.pie.js"="9/25/2017 6:17 AM, 37830 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\Core
       Adds the file adstat.xml"="9/13/2019 9:22 AM, 8 bytes, A
       Adds the file core.ini"="9/13/2019 9:22 AM, 217 bytes, A
       Adds the file logs.xml"="9/13/2019 9:22 AM, 51 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\Program Management Console
    In the existing folder C:\Users\{username}\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
       Adds the file CompuClever PC TuneUp.lnk"="9/13/2019 9:22 AM, 1255 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CompuClever
       Adds the file CompuClever PC TuneUp.lnk"="9/13/2019 9:22 AM, 1267 bytes, A
    In the existing folder C:\Users\{username}\Desktop
       Adds the file CompuClever PC TuneUp.lnk"="9/13/2019 9:22 AM, 1231 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file CompuClever PC TuneUp Generate Reports"="9/13/2019 9:22 AM, 3746 bytes, A
       Adds the file CompuClever PC TuneUp Manual Startup"="9/13/2019 9:22 AM, 3512 bytes, A
       Adds the file CompuClever PC TuneUp Startup"="9/13/2019 9:22 AM, 3388 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\CompuClever PC TuneUp]
       "Contact"="REG_SZ", "CompuClever PC TuneUp Support Team"
       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\ccpcc.exe"
       "DisplayName"="REG_SZ", "CompuClever PC TuneUp"
       "DisplayVersion"="REG_SZ", "2.5.3.72"
       "EstimatedSize"="REG_DWORD", 33582
       "HelpLink"="REG_SZ", "http://www.compuclever.com"
       "InstallDate"="REG_SZ", "20190913092220"
       "InstallLocation"="REG_SZ", "C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp"
       "Lang"="REG_SZ", "en-us"
       "MajorVersion"="REG_SZ", "2"
       "MinorVersion"="REG_SZ", "5"
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "CompuClever System Inc."
       "QuietUninstallString"="REG_SZ", ""C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\uninstall.exe" /S"
       "UninstallString"="REG_SZ", "C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\uninstall.exe"
       "URLInfoAbout"="REG_SZ", "http://www.compuclever.com"
       "URLUpdateInfo"="REG_SZ", "http://www.compuclever.com"
       "VendorID"="REG_SZ", "CompuClever"
       "Version"="REG_SZ", "2.5.3.72"
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CCManagementService]
       "Description"="REG_SZ", "Provides services related to product licensing, reminder, and communication for all CompuClever applications. Termination of this service will cause issues related to product licensing, product updates, scans, and prevent CompuClever applications function properly as designed."
       "DisplayName"="REG_SZ", "CompuClever Management Service"
       "ErrorControl"="REG_DWORD", 1
       "FailureActions"="REG_BINARY, ......................
       "ImagePath"="REG_EXPAND_SZ, ""C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\ccmanagementservice.exe""
       "ObjectName"="REG_SZ", "LocalSystem"
       "Start"="REG_DWORD", 2
       "Type"="REG_DWORD", 272
       "WOW64"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CompuCleverBootor]
       "DisplayName"="REG_SZ", "CompuCleverBootor"
       "ErrorControl"="REG_DWORD", 0
       "ImagePath"="REG_EXPAND_SZ, "\??\C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\Bootor64.sys"
       "Start"="REG_DWORD", 1
       "Type"="REG_DWORD", 1
       "WOW64"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\CompuClever\ChromeInfo]
       "chromePrePath"="REG_SZ", "C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences"
    [HKEY_CURRENT_USER\Software\CompuClever\Core]
       "uid"="REG_SZ", "{951DC262-5403-4181-8AB2-50F67FD22121}"
Malwarebytes log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 9/13/19
Scan Time: 9:36 AM
Log File: 42d86b6e-d5f9-11e9-9519-00ffdcc6fdfc.json

-Software Information-
Version: 3.8.3.2965
Components Version: 1.0.613
Update Package Version: 1.0.12451
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 235906
Threats Detected: 127
Threats Quarantined: 127
Time Elapsed: 15 min, 56 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 1
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\ccpcc.exe, Quarantined, [978], [731550],1.0.12451

Module: 20
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\ccpcc.exe, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\CommonLib_MFC.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\imgdecoder-png.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\mfc120u.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\msvcp120.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\msvcr120.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_Browsers.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_DiskDefrag.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_InternetOpt.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_JunkClean.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_Privacy.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_RegDefrag.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_RegFix.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_StartupMgr.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_SysOpt.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_WinUpdate.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\render-gdi.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\soui.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\sqlite3.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\utilities.dll, Quarantined, [978], [731550],1.0.12451

Registry Key: 11
PUP.Optional.CompuClever, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CompuClever PC TuneUp, Quarantined, [978], [731556],1.0.12451
PUP.Optional.CompuClever, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CompuCleverBootor, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\CompuClever PC TuneUp Generate Reports, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{E0061115-1ED4-4A09-AB2A-B53798E5D98A}, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{E0061115-1ED4-4A09-AB2A-B53798E5D98A}, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\CompuClever PC TuneUp Manual Startup, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{BE411E96-2BE2-459F-9A2A-2B44017B6B2B}, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{BE411E96-2BE2-459F-9A2A-2B44017B6B2B}, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\CompuClever PC TuneUp Startup, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{96641B1B-05EB-4A79-8717-8467F9ACD45B}, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{96641B1B-05EB-4A79-8717-8467F9ACD45B}, Quarantined, [978], [731550],1.0.12451

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 12
PUP.Optional.CompuClever, C:\PROGRAM FILES (X86)\COMPUCLEVER\COMPUCLEVER PC TUNEUP, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\CompuClever PC TuneUp\Data, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\PROGRAMDATA\COMPUCLEVER\COMPUCLEVER PC TUNEUP, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\html, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\css, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\js, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\defragbackup, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\log, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\USERS\{username}\APPDATA\ROAMING\COMPUCLEVER\COMPUCLEVER PC TUNEUP, Quarantined, [978], [731551],1.0.12451

File: 83
PUP.Optional.CompuClever, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\COMPUCLEVER PC TUNEUP.LNK, Quarantined, [978], [731552],1.0.12451
PUP.Optional.CompuClever, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\COMPUCLEVER\COMPUCLEVER PC TUNEUP.LNK, Quarantined, [978], [731553],1.0.12451
PUP.Optional.CompuClever, C:\USERS\{username}\DESKTOP\COMPUCLEVER PC TUNEUP.LNK, Quarantined, [978], [731554],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\Bootor.sys, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\Bootor64.sys, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\ccpcc.exe, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\ccpcc_cs.exe, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\chrome_encry.exe, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\CommonLib_MFC.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\ErrorReportSubmit.exe, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\FixCenter.exe, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\IERepair.exe, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\imgdecoder-png.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\launcher.ccpccexe, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\mfc120u.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\Microsoft.VC120.CRT.manifest, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\msvcp120.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\msvcr120.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_Browsers.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_DiskDefrag.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_InternetOpt.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_JunkClean.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_Privacy.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_RegDefrag.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_RegFix.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_StartupMgr.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_SysOpt.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_Uninstaller.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\NG_Mod_WinUpdate.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\render-gdi.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\SightOfUser.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\soui-sys-resource.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\soui.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\sqlite3.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\uninstall.exe, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\CompuClever PC TuneUp\utilities.dll, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\WINDOWS\SYSTEM32\TASKS\CompuClever PC TuneUp Generate Reports, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\WINDOWS\SYSTEM32\TASKS\CompuClever PC TuneUp Manual Startup, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\WINDOWS\SYSTEM32\TASKS\CompuClever PC TuneUp Startup, Quarantined, [978], [731550],1.0.12451
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\CompuClever PC TuneUp\Data\Rules.dat, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\CompuClever PC TuneUp\Data\startuplist.dat, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\CompuClever PC TuneUp\Data\unwanted_plugin.dat, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\defragbackup\.DEFAULT_backup.hch, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\defragbackup\COMPONENTS_backup.hch, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\defragbackup\S-1-5-19_backup.hch, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\defragbackup\S-1-5-20_backup.hch, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\defragbackup\S-1-5-21-1350903546-318028887-1286703239-1003_backup.hch, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\defragbackup\S-1-5-21-1350903546-318028887-1286703239-1003_Classes_backup.hch, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\defragbackup\SAM_backup.hch, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\defragbackup\SECURITY_backup.hch, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\defragbackup\SOFTWARE_backup.hch, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\defragbackup\SYSTEM_backup.hch, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\log\20190911-20190917.xml, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\css\style.css, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\html\index.htm, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\chart_overlay.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\icon_clean.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\icon_tips.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\icon_tuneup.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\info_trigger.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\list_image.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\list_image_active.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\mite.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\o_layer_white.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\pccare_logo.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\status_green.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\status_red.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\status_yellow.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\images\tooltip_pointer.png, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\js\jquery-1.11.1.min.js, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\js\my_scripts.js, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\js\rgraph.common.core.js, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\js\rgraph.common.dynamic.js, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\js\rgraph.common.effects.js, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\js\rgraph.common.key.js, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\js\rgraph.common.tooltips.js, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\reports\template\js\rgraph.pie.js, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\HomeStateInfo.xml, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\ignorelist.xml, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\pcc.ini, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\CompuClever PC TuneUp\PopupResultInfo.xml, Quarantined, [978], [731551],1.0.12451
PUP.Optional.CompuClever, C:\USERS\{username}\APPDATA\LOCAL\TEMP\NST4DE4.TMP\CCPCC_SETUP_RES.DLL, Quarantined, [978], [731558],1.0.12451
PUP.Optional.CompuClever, C:\USERS\{username}\DESKTOP\COMPUCLEVERPCTUNEUP_SETUP.EXE, Quarantined, [978], [731558],1.0.12451

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 1

Advertisements





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.