Title: OpenCloud AV
Also known as: Open Cloud AV, OpenCloud Antivirus
Remove OpenCloud AV
Removal instructions
Severity scale:  (80 / 100)
OpenCloud AV is a program that was released by the same scammers who let OpenCloud Antivirus or OpenCloud Security into the wild. Unlike regular anti-virus software, it has no capabilities to detect or remove viruses and reports only invented threats in order to scare its victims. Please do not confuse the rogue program with an open source project called OpenCloudAV, hosted on www.opencloudav.com. The legitimate OpenCloudAV is a multi-engine based malware analysis service from the network cloud. It has nothing to do with the fake one and cybercrime. However, this is a very good example how scammers can manipulate to suit their own needs. The rogue OpenCloud AV spreads through trojans and security holes in people’s computer systems, so most of its intrusion cases stay unnoticed. However, you can simply avoid OpenCloud AV infiltration by installing licensed versions of anti-virus and anti-spyware programs. In addition, as soon as you notice any of the following signs of the virus, remove Open Cloud AV.
According to security experts, OpenCloud AV acts just like a regular rogue anti-spyware. As soon as it manages to get inside the system, it modifies it by adding few new keys in Windows Registry and prepares itself to launch every time PC is rebooted. Malware starts ‘scanning’ the system additionally and always claims the same story about numerous viruses detected. You can also be sure that you will receive numerous of its popup ads and scanners saying the same thing. OpenCloud AV was also noticed to cause browser redirections to various websites also promoting its license or other things that shouldn’t be installed on your computer.
Most of its alerts report:
Warning: Infection is Detected
Windows has found spyware infection on your computer!
Click here to update your Windows antivirus software
Windows Security Alert
To help protect your computer, Windows Firewall has blocked some features of this program.
Do you want to keep blocking this program?
Zeus Trojan
Warning! Infection found
Unwanted software (malware) or tracking cookies have been found during last scan. It is highly recommended to remove it from your computer.
Keylogger Zeus was detected and put in quarantine.
Keylogger Zeus is a very dangerous software used by criminals to steal personal data such as credit card information, access to banking accounts, passwords to social networks and e-mails.
The first advice we can give, is to ignore all those alerts saying that your computer is being attacked by Trojans, Worms and other malware. It becomes apparent that the scan is faked and you have OpenCloud AV on your machine. In addition, don’t remove those viruses reported by Open Cloud Antivurus – in reality they are harmless your system files that pose no potential risk for your PC and data on it. And finally, never purchase this malicious program. We highly recommend you to remove OpenCloud AV either manually or with a help of a reputable anti-spyware.
When removing OpenCloud AV, stop all the processes with csrss.exe ending except the one from C:\Windows…. or one of its subfolders . Additionally, download and run GMER and TDSS Killer because this virus always comes with rootkit and finally run a full system scan with Spyware Doctor anti-spyware to remove OpenCloud AV leftovers.
Automatic OpenCloud AV removal:
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove OpenCloud AV you agree to our privacy policy and agreement of use.
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes OpenCloud AV (2011-10-10 10:49:12)
We are testing Spyware Doctor's efficiency at removing OpenCloud AV
(2012-01-05 09:13:49)
We are testing STOPzilla's efficiency at removing OpenCloud AV
(2012-01-05 09:13:49)
OpenCloud AV manual removal:
Kill processes: csrss.exe
Delete registry values:HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:59232
Delete files:%Temp%\csrss.exe
%AppData%\OpenCloud Antivirus\csrss.exe
%Programs%\Startup\csrss.exe
c:\Windows\[random numbers].exe, which might be hidden due to rootkit
Phone Support to remove OpenCloud AV
QR code for OpenCloud AV removal instructions:
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.
The reason we add QR code to the website is that parasites like OpenCloud AV are really hard to remove on infected computer.
you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall OpenCloud AV right in your pocket.
Simply use the QR scanner and read removal instructions from mobile device.
SYMPTOMS OF rogue antispyware INFECTION
Rogue AntiSpyware virus enters your PC without your consent or using some sort of social engineering trick. Fake scanner pages, malicious mail attachments or system vulnerabilities are often used.
Virus has a single goal: to gain money. Like other rogue anti-spyware applications, it will try to convince you that your system is infected with multiple parasites: trojans, adware, or other rogues. Typically, rogues do not provide enough detail about infections detected or show fake results. Rogue anti-spyware like OpenCloud AV will not clean any actual infections for free.
Most of the parasites of this type do not have parasite detection engine thus every warning they show is a random one. If you see persistent popups or alerts, you can safely discard them.
You should never pay for Rogue Anti-spyware application like OpenCloud AV as it funds development of other computer parasites.
Information added: 2011-10-10 10:49:12
Information updated: 2012-01-05 06:36:34
Additional resources:
Attention: If you know know a reputable website reated to security threats, please add a link here: add
url
more resources
|
FORUM:
HELP:
|
Follow us 
|
Like us 
Post Comment: