Remove SysCleaner. Description and removal instructions

 
Title: SysCleaner

Type: Malware
Severity scale:SysCleaner severity is 75  (75 / 100)
 
SysCleaner is a corrupt anti-spyware application that deals with infecting its victim's systems via trojans and then harassing them with security notification. This parasite also runs a faux-scan for spyware and shows an exaggerated threat report in order to scare users into purchasing the "full" SysCleaner version.

Be aware that SysCleaner is a complete scam, and it is designed to rip you off and leave you with nothing. If you have been infected, remove SysCleaner immediately.




Related files: syscleaner.exe, syscleaner.db, syscleaner.pkg, scsdelete.dll

SysCleaner properties:
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic SysCleaner removal:

remover for SysCleaner

SysCleaner manual removal:

Kill processes:
syscleaner.exe, syscleaner_installer.exe
Delete registry values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run syscleaner
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run syscleaner
HKEY_CURRENT_USER\software\syscleaner\scan\folders
HKEY_CURRENT_USER\software\syscleaner\settings options2
HKEY_CURRENT_USER\software\syscleaner\settings scheduleoptions
HKEY_CURRENT_USER\software\syscleaner\settings scheduletime
HKEY_CLASSES_ROOT\clsid\{7ebf9fa8-fe21-49be-b3b9-6bcb6637670a}\inprocserver32
HKEY_CURRENT_USER\software\syscleaner app
HKEY_CURRENT_USER\software\syscleaner filesystemsizefounded
HKEY_CURRENT_USER\software\syscleaner filesystemsizetreated
HKEY_CURRENT_USER\software\syscleaner state
HKEY_CURRENT_USER\software\syscleaner clsid_securedelete
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run syscleaner
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved {7ebf9fa8-fe21-49be-b3b9-6bcb6637670a}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\syscleaner
HKEY_LOCAL_MACHINE\software\syscleaner info
HKEY_LOCAL_MACHINE\software\syscleaner pstatus
HKEY_CLASSES_ROOT\allfilesystemobjects\shellex\contextmenuhandlers\scsdelete
HKEY_CLASSES_ROOT\clsid\{645ff040-5081-101b-9f08-00aa002f954e}\shellex\contextmenuhandlers\scsdelete
HKEY_CURRENT_USER\software\syscleaner filesystem
HKEY_CURRENT_USER\software\syscleaner filesystem_tr
HKEY_LOCAL_MACHINE\software\syscleaner version
HKEY_CURRENT_USER\software\syscleaner
HKEY_CURRENT_USER\software\syscleaner registry
HKEY_CURRENT_USER\software\syscleaner alltreated
HKEY_CURRENT_USER\software\syscleaner lowtreats
HKEY_CURRENT_USER\software\syscleaner mediumtreats
HKEY_CURRENT_USER\software\syscleaner registry_tr
HKEY_CURRENT_USER\software\syscleaner totaldetected
HKEY_CURRENT_USER\software\syscleaner totalruns
HKEY_CURRENT_USER\software\syscleaner totalsize
HKEY_CURRENT_USER\software\syscleaner\scan options
HKEY_CURRENT_USER\software\syscleaner hide
HKEY_CURRENT_USER\software\syscleaner hightreats
HKEY_CURRENT_USER\software\syscleaner lastrun
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\syscleaner displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\syscleaner uninstallstring
HKEY_CLASSES_ROOT\clsid\{7ebf9fa8-fe21-49be-b3b9-6bcb6637670a}\inprocserver32 threadingmodel
HKEY_CLASSES_ROOT\clsid\{7ebf9fa8-fe21-49be-b3b9-6bcb6637670a}

Unregister DLLs:
scsdelete.dll

Delete files:
syscleaner.exe, syscleaner.db, syscleaner.pkg, scsdelete.dll
Delete directories:
%program files%\syscleaner

Other programs to remove SysCleaner:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 31/01/08
Information updated: 31/01/08

Additional resources related to SysCleaner:

Attention: If you know or you have a website or page about SysCleaner removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about SysCleaner parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: