Announcement

Collapse
No announcement yet.

Remove One Click PC Cleaner and 1884167172 Fake BSOD Alert

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Remove One Click PC Cleaner and 1884167172 Fake BSOD Alert

    This guide is for a new Rogue.Tech-Support-Scam that pretends to be a Windows PC cleaner called One Click PC Cleaner and the well-known CCleaner program, but in reality only displays a fake blue screen of death in order to scare you into calling a remote support number. When installed, this infection will have an installation name of CCleaner.exe, which has nothing to do with the legitimate CCleaner, but when executed will display a program called One Click PC Cleaner. This fake cleaner will pretend to be scanning your computer for problems, but after a few seconds will display a fake Windows BSOD crash that pretends to be a serious problem on your computer. This alert then prompts you to call the 18884167172 remote support number so that they can sell you unneeded services.

    Remove One Click PC Cleaner and 1884167172 Fake BSOD Alert

    • Tue, 12 Apr 2016 09:04:10 EDT
    • Read 284 times








    This guide is for a new Rogue.Tech-Support-Scam that pretends to be a Windows PC cleaner called One Click PC Cleaner and the well-known CCleaner program, but in reality only displays a fake blue screen of death in order to scare you into calling a remote support number. When installed, this infection will have an installation name of CCleaner.exe, which has nothing to do with the legitimate CCleaner, but when executed will display a program called One Click PC Cleaner. This fake cleaner will pretend to be scanning your computer for problems, but after a few seconds will display a fake Windows BSOD crash that pretends to be a serious problem on your computer. This alert then prompts you to call the 18884167172 remote support number so that they can sell you unneeded services.

    When this infection is installed it will change the Windows configuration so you are unable to start Task Manager. This allows it to display fake BSOD alert, which overlaps your entire screen, without fear that you can terminate it. The text of the BSOD crash that will be displayed is:
    High Priority Risk
    0x000000CE DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS
    WINDOWS HEALTH EXTREMELY CRITICAL
    DO NOT RESTART
    PLEASE CONTACT TECHNICAL SUPPORT
    BSOD: Error 333 Registry Failure of
    Windows operating system - Host:
    BLUE SCREEN ERROR 0x000000CE
    Please contact Technical Support At Toll Free:
    (18884167172)
    To Immediately Diagnose and Fix Issues to Prevent Data Loss

    Without a doubt, this program was created for the sole purpose of displaying a fake Windows crash so that you will be scared into calling their remote support number. For no reason should you call this number, and if you have already purchased services from them, I would advise you to dispute the charges on your credit card company. To remove this Trojan and any related software, please use the removal guide below.
    Array
    View Associated One Click PC Cleaner Files %Temp%\nss9A55.tmp\CCleaner\ %LocalAppData%\IConnect\ %LocalAppData%\IConnect\CCleaner\ %LocalAppData%\IConnect\CCleaner\73746f6c656e-66726f6d-626c656570696e67.dll %LocalAppData%\IConnect\CCleaner\CCleaner.exe %LocalAppData%\IConnect\CCleaner\CCleaner.exe.config %LocalAppData%\IConnect\CCleaner\CCleaner.InstallState %LocalAppData%\IConnect\CCleaner\clean.ico %LocalAppData%\IConnect\CCleaner\errorconfig.xml %LocalAppData%\IConnect\CCleaner\Windows.Form.Extension.dll %LocalAppData%\IConnect\CCleaner\Windows.Form.Extension.dll %AppData%\Microsoft\Windows\Start Menu\Programs\Startup\CCleaner.lnk


    View Associated One Click PC Cleaner Registry Information HKCU\Software\Microsoft\Installer\Assemblies\C:|Users|User|AppData|Local|IConnect|CCleaner|CCleaner. exe HKCU\Software\73746f6c656e-66726f6d-626c656570696e67 HKCU\Software\Microsoft\Installer\Products\BDDC7281A8B153A43B56061C8C7FD9C0\ProductName CCleaner HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\%LocalAppData%\IConnect\CCleaner\ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\%LocalAppData%\IConnect\ HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell "explorer.exe, CCleaner.exe" HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1827CDDB-1B8A-4A35-B365-60C1C8F79D0C}







    Click here to view the article.
Working...
X