Analisado por: Arvin Roi Macaraeg   
 

Hoax.Win32.SafeCleaner.j(KASPERSKY); Riskware/SafeCleaner(FORTINET)

 Plataforma:

Windows

 Classificao do risco total:
 Potencial de dano:
 Potencial de distribuição:
 infecção relatada:
 Impacto no sistema: :
 Exposição das informações:
Baixo
Medium
Alto
Crítico

  • Tipo de grayware:
    Potentially Unwanted Application

  • Destrutivo:
    Não

  • Criptografado:
     

  • In the Wild:
    Sim

  Visão geral

Wird möglicherweise manuell von einem Benutzer installiert.

  Detalhes técnicos

Tipo de compactação: 6,007,808 bytes
Tipo de arquivo: EXE
Residente na memória: Sim
Data de recebimento das amostras iniciais: 07 novembro 2019

Übertragungsdetails

Wird möglicherweise manuell von einem Benutzer installiert.

Installation

Schleust die folgenden Dateien ein:

  • %Program Files%\OneSafe PC Cleaner\unins000.exe
  • %Program Files%\OneSafe PC Cleaner\Animation.gif
  • %Program Files%\OneSafe PC Cleaner\Brazilian.ini
  • %Program Files%\OneSafe PC Cleaner\Cookies.txt
  • %Program Files%\OneSafe PC Cleaner\Danish.ini
  • %Program Files%\OneSafe PC Cleaner\Dutch.ini
  • %Program Files%\OneSafe PC Cleaner\English.ini
  • %Program Files%\OneSafe PC Cleaner\Finnish.ini
  • %Program Files%\OneSafe PC Cleaner\French.ini
  • %Program Files%\OneSafe PC Cleaner\German.ini
  • %Program Files%\OneSafe PC Cleaner\Italian.ini
  • %Program Files%\OneSafe PC Cleaner\Japanese.ini
  • %Program Files%\OneSafe PC Cleaner\Korean.ini
  • %Program Files%\OneSafe PC Cleaner\Norwegian.ini
  • %Program Files%\OneSafe PC Cleaner\OneSafePCCleaner.exe
  • %Program Files%\OneSafe PC Cleaner\OSPCNotifications.exe
  • %Program Files%\OneSafe PC Cleaner\Polish.ini
  • %Program Files%\OneSafe PC Cleaner\Portuguese.ini
  • %Program Files%\OneSafe PC Cleaner\SchedTasks.txt
  • %Program Files%\OneSafe PC Cleaner\Services1.txt
  • %Program Files%\OneSafe PC Cleaner\Services2.txt
  • %Program Files%\OneSafe PC Cleaner\SList.db
  • %Program Files%\OneSafe PC Cleaner\SList.txt
  • %Program Files%\OneSafe PC Cleaner\Spanish.ini
  • %Program Files%\OneSafe PC Cleaner\sqlite3.dll
  • %Program Files%\OneSafe PC Cleaner\Swedish.ini
  • %Program Files%\OneSafe PC Cleaner\Turkish.ini
  • %Program Files%\OneSafe PC Cleaner\UList.txt
  • %Program Files%\OneSafe PC Cleaner\OneSafePCCleaner.chm
  • %All Users Profile%\OneSafe PC Cleaner\Cookies.txt
  • %Desktop%\OneSafe PC Cleaner.lnk
  • %Common Programs%\OneSafe PC Cleaner\OneSafe PC Cleaner.lnk
  • %Common Programs%\OneSafe PC Cleaner\Help.lnk
  • %Common Programs%\OneSafe PC Cleaner\Check updates.lnk
  • %Common Programs%\OneSafe PC Cleaner\OneSafe PC Cleaner on the Web.lnk
  • %Common Programs%\OneSafe PC Cleaner\Uninstall OneSafe PC Cleaner.lnk

(Hinweis: %Program Files%ist der Standardordner 'Programme', normalerweise C:\Programme.. %Desktop% ist der Ordner 'Desktop' für den aktuellen Benutzer, normalerweise C:\Windows\Profile\{Benutzername}\Desktop unter Windows 98 und ME, C:\WINNT\Profile\{Benutzername}\Desktop unter Windows NT, C:\Dokumente und Einstellungen\{Benutzername}\Desktop unter Windows 2000(32-bit), XP und Server 2003(32-bit) und C:\Users\{Benutzername}\Desktop unter Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) und 10(64-bit).)

Autostart-Technik

Fügt die folgenden Zeilen oder Registrierungseinträge als Teil der eigenen Installationsroutine hinzu:

    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      InstallerName = %User Temp%\{Malware Name}.exe
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      PrivacyURL = https://we{BLOCKED}.ava{BLOCKED}st.com/red{BLOCKED}.cfm?eredire{BLOCKED}uest/OneSafe_PC_Cleaner_Privacy_ML.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      EulaURL = https://we{BLOCKED}ls.av{BLOCKED}st.com/redirect.cfm?er{BLOCKED}d=Ava{BLOCKED}fe_PC_Cleaner_EULA_ML.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      AdsAntivirusLink = https://we{BLOCKED}tools.av{BLOCKED}est.com/red{BLOCKED}m?eredirectId=Avanque{BLOCKED}e_PC_Cleaner_Antivirus_ML.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      AdsAntivirusName = Adaware
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      AdsDownloadURL = http://we{BLOCKED}ls.av{BLOCKED}st.com/red{BLOCKED}t.cfm?ere{BLOCKED}nquest/OneSafe_PC_Cl{BLOCKED}sell_Buy_ML.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      UseAds = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      BuyNowURL50 = https://web{BLOCKED}s.av{BLOCKED}est.com/redi{BLOCKED}.cfm?re{BLOCKED}tId=Ava{BLOCKED}t/OneSa{BLOCKED}ner_Buy_50_ML_06.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      BuyNowURL20 = https://web{BLOCKED}s.ava{BLOCKED}t.com/redir{BLOCKED}redirectId=Ava{BLOCKED}e_PC_Cleaner_Buy_20_ML_06.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      PromoOffers = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      HideAfterInstallURL = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      Phones = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      ComplementURL = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      BuyNowURLCs = http://we{BLOCKED}ls.av{BLOCKED}st.com/red{BLOCKED}m?eredirectId=Avanque{BLOCKED}_PC_Cleaner_C{BLOCKED}ylink_OSPCC_ML.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      UninstallURL = https://we{BLOCKED}ls.av{BLOCKED}t.com/r{BLOCKED}ct.cfm?red{BLOCKED}d=Av{BLOCKED}st/OneS{BLOCKED}eaner_UI_ML_06.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      AfterInstallURL = https://we{BLOCKED}ls.av{BLOCKED}t.com/re{BLOCKED}t.cfm?redi{BLOCKED}quest/OneS{BLOCKED}eaner_Post_Install_ML_06.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      SupportURL = https://we{BLOCKED}ols.ava{BLOCKED}st.com/re{BLOCKED}ct.cfm?ere{BLOCKED}d=Avanquest/OneSa{BLOCKED}eaner_Support_ML.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      RenewURL = https://we{BLOCKED}ols.av{BLOCKED}est.com/red{BLOCKED}ct.cfm?redi{BLOCKED}d=Avanquest/OneS{BLOCKED}leaner_Renewal_ML.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      ProURL = https://we{BLOCKED}ols.avan{BLOCKED}st.com/re{BLOCKED}ct.cfm?redir{BLOCKED}d=Avanquest/OneSa{BLOCKED}aner_Upsell_PRO_ML_V6.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      BuyNowURL = https://we{BLOCKED}ls.av{BLOCKED}est.com/re{BLOCKED}ct.cfm?red{BLOCKED}Id=Avanquest/OneS{BLOCKED}aner_Buy_ML_06.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      HomePageURL = https://we{BLOCKED}ls.av{BLOCKED}est.com/re{BLOCKED}ct.cfm?er{BLOCKED}ctId=Avanquest/OneSa{BLOCKED}eaner_Home_ML.htm
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      PartnerID = ONESAFE
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      UpgradeID = ML_OSPCC_70
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      BuildID = OneSafe_PC_Cleaner_ML
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      CreationDate = {Date Installed}
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      Cv = {Month And Year Installed}
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      Language = 1
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      Inno Setup: Setup Version = 6.0.2 (u)
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      Inno Setup: App Path = %Program Files%\OneSafe PC Cleaner
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      InstallLocation = %Program Files%\OneSafe PC Cleaner\
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      Inno Setup: Icon Group = OneSafe PC Cleaner
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      Inno Setup: User = {User Name}
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      Inno Setup: Selected Tasks = desktopicon
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      Inno Setup: Deselected Tasks = {Default}
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      Inno Setup: Language = en
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      DisplayName = OneSafe PC Cleaner v7.0.0.59 (32-bit)
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      DisplayIcon = %Program Files%\OneSafe PC Cleaner\OneSafePCCleaner.exe,0
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      UninstallString = "%Program Files%\OneSafe PC Cleaner\unins000.exe"
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      QuietUninstallString = "%Program Files%\OneSafe PC Cleaner\unins000.exe" /SILENT
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      DisplayVersion = 7.0.0.59
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      Publisher = Avanquest Software
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      NoModify = 1
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      NoRepair = 1
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      InstallDate = 20191108
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      MajorVersion = 7
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      MinorVersion = 0
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      VersionMajor = 7
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      VersionMinor = 0
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
      EstimatedSize = 18153
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      OnWinStartup = 0
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      s_SmartEnabled = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      s_SmartMode = 0
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      s_SmartDate = {Hex Values}
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      MonitorNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      LastMonitorNotification = {Hex Values}
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      LastSlowStartupNotification = {Hex Values}
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      NewAppNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      NewExtNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      StartupNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      SlowStartupNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      CrashNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      NoAVNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      PUANotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      LowDiskSpaceNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      LowFreeMemNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      BigCacheSizeNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      CookieNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      UninstallNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      MinFreeDiskSpace = 10
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      MinFreeMemory = 10
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      MinCacheSize = 500
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      MinCookieNumber = 100
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      CheckUpdates = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      LastUpdCheck = {Hex Values}
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      SoftwareNotifications = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      LastSrvNotification = {Hex Values}
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      LastSrvCheck = {Hex Values}
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      BackupDir = %Application Data%\OneSafe PC Cleaner\Backup
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      DisplayName = OneSafe PC Cleaner
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      Version = 7.0.0
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      InstallationDate = {Hex Values}
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      TrayAllowed = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      NLaunches = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      LogDir = %Application Data%\OneSafe PC Cleaner\Log
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      UndoDir = %Application Data%\OneSafe PC Cleaner\Undo
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      ItemsToRegistryScan = 1111111111
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      ItemsToPrivacyScan = 1111
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      ItemsToRecoveryScan = 1111
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      UseExclusions = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      ShowRebootMessage = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      ShowRecycleBin = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      FormSP = 1
    • HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
      ShowTips = 1

  Solução

Mecanismo de varredura mínima: 9.850
SSAPI Pattern File: 2.233.00
SSAPI Pattern Release Date: 14 novembro 2019

Step 1

Für Windows ME und XP Benutzer: Stellen Sie vor einer Suche sicher, dass die Systemwiederherstellung deaktiviert ist, damit der gesamte Computer durchsucht werden kann.

Step 2

Note that not all files, folders, and registry keys and entries are installed on your computer during this malware's/spyware's/grayware's execution. This may be due to incomplete installation or other operating system conditions. If you do not find the same files/folders/registry information, please proceed to the next step.

Step 3

PUA.Win32.PCCleaner.AU über die eigene Option zum Deinstallieren entfernen

[ Saber mais ]
Den Grayware-Prozess deinstallieren

Step 4

Diesen Registrierungswert löschen

[ Saber mais ]

Wichtig: Eine nicht ordnungsgemäße Bearbeitung der Windows Registrierung kann zu einer dauerhaften Fehlfunktion des Systems führen. Führen Sie diesen Schritt nur durch, wenn Sie mit der Vorgehensweise vertraut sind oder wenn Sie Ihren Systemadministrator um Unterstützung bitten können. Lesen Sie ansonsten zuerst diesen Microsoft Artikel, bevor Sie die Registrierung Ihres Computers ändern.

  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • InstallerName = %User Temp%\{Malware Name}.exe
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • PrivacyURL = https://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Privacy_ML.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • EulaURL = https://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_EULA_ML.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • AdsAntivirusLink = https://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Antivirus_ML.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • AdsAntivirusName = Adaware
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • AdsDownloadURL = http://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Crossell_Buy_ML.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • UseAds = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • BuyNowURL50 = https://webtools.avanquest.com/redirect.cfm?redirectId=Avanquest/OneSafe_PC_Cleaner_Buy_50_ML_06.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • BuyNowURL20 = https://webtools.avanquest.com/redirect.cfm?redirectId=Avanquest/OneSafe_PC_Cleaner_Buy_20_ML_06.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • PromoOffers = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • HideAfterInstallURL = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • Phones = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • ComplementURL = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • BuyNowURLCs = http://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Crossell_Buylink_OSPCC_ML.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • UninstallURL = https://webtools.avanquest.com/redirect.cfm?redirectId=Avanquest/OneSafe_PC_Cleaner_UI_ML_06.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • AfterInstallURL = https://webtools.avanquest.com/redirect.cfm?redirectId=Avanquest/OneSafe_PC_Cleaner_Post_Install_ML_06.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • SupportURL = https://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Support_ML.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • RenewURL = https://webtools.avanquest.com/redirect.cfm?redirectId=Avanquest/OneSafe_PC_Cleaner_Renewal_ML.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • ProURL = https://webtools.avanquest.com/redirect.cfm?redirectId=Avanquest/OneSafe_PC_Cleaner_Upsell_PRO_ML_V6.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • BuyNowURL = https://webtools.avanquest.com/redirect.cfm?redirectId=Avanquest/OneSafe_PC_Cleaner_Buy_ML_06.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • HomePageURL = https://webtools.avanquest.com/redirect.cfm?eredirectId=Avanquest/OneSafe_PC_Cleaner_Home_ML.htm
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • PartnerID = ONESAFE
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • UpgradeID = ML_OSPCC_70
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • BuildID = OneSafe_PC_Cleaner_ML
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • CreationDate = {Date Installed}
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • Cv = {Month And Year Installed}
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • Language = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • Inno Setup: Setup Version = 6.0.2 (u)
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • Inno Setup: App Path = %Program Files%\OneSafe PC Cleaner
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • InstallLocation = %Program Files%\OneSafe PC Cleaner\
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • Inno Setup: Icon Group = OneSafe PC Cleaner
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • Inno Setup: User = {User Name}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • Inno Setup: Selected Tasks = desktopicon
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • Inno Setup: Deselected Tasks = {Default}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • Inno Setup: Language = en
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • DisplayName = OneSafe PC Cleaner v7.0.0.59 (32-bit)
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • DisplayIcon = %Program Files%\OneSafe PC Cleaner\OneSafePCCleaner.exe,0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • UninstallString = "%Program Files%\OneSafe PC Cleaner\unins000.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • QuietUninstallString = "%Program Files%\OneSafe PC Cleaner\unins000.exe" /SILENT
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • DisplayVersion = 7.0.0.59
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • Publisher = Avanquest Software
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • NoModify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • NoRepair = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • InstallDate = 20191108
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • MajorVersion = 7
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • MinorVersion = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • VersionMajor = 7
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • VersionMinor = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneSafe PC Cleaner_is1
    • EstimatedSize = 18153
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • OnWinStartup = 0
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • s_SmartEnabled = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • s_SmartMode = 0
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • s_SmartDate = {Hex Values}
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • MonitorNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • LastMonitorNotification = {Hex Values}
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • LastSlowStartupNotification = {Hex Values}
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • NewAppNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • NewExtNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • StartupNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • SlowStartupNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • CrashNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • NoAVNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • PUANotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • LowDiskSpaceNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • LowFreeMemNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • BigCacheSizeNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • CookieNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • UninstallNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • MinFreeDiskSpace = 10
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • MinFreeMemory = 10
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • MinCacheSize = 500
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • MinCookieNumber = 100
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • CheckUpdates = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • LastUpdCheck = {Hex Values}
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • SoftwareNotifications = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • LastSrvNotification = {Hex Values}
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • LastSrvCheck = {Hex Values}
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • BackupDir = %Application Data%\OneSafe PC Cleaner\Backup
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • DisplayName = OneSafe PC Cleaner
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • Version = 7.0.0
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • InstallationDate = {Hex Values}
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • TrayAllowed = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • NLaunches = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • LogDir = %Application Data%\OneSafe PC Cleaner\Log
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • UndoDir = %Application Data%\OneSafe PC Cleaner\Undo
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • ItemsToRegistryScan = 1111111111
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • ItemsToPrivacyScan = 1111
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • ItemsToRecoveryScan = 1111
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • UseExclusions = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • ShowRebootMessage = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • ShowRecycleBin = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • FormSP = 1
  • In HKEY_CURRENT_USER\Software\OneSafe PC Cleaner
    • ShowTips = 1

Step 5

Diese Datei suchen und löschen

[ Saber mais ]
Möglicherweise sind einige Komponentendateien verborgen. Aktivieren Sie unbedingt das Kontrollkästchen Versteckte Elemente durchsuchen unter Weitere erweiterte Optionen, um alle verborgenen Dateien und Ordner in den Suchergebnissen zu berücksichtigen.
  • %Program Files%\OneSafe PC Cleaner\unins000.exe
  • %Program Files%\OneSafe PC Cleaner\Animation.gif
  • %Program Files%\OneSafe PC Cleaner\Brazilian.ini
  • %Program Files%\OneSafe PC Cleaner\Cookies.txt
  • %Program Files%\OneSafe PC Cleaner\Danish.ini
  • %Program Files%\OneSafe PC Cleaner\Dutch.ini
  • %Program Files%\OneSafe PC Cleaner\English.ini
  • %Program Files%\OneSafe PC Cleaner\Finnish.ini
  • %Program Files%\OneSafe PC Cleaner\French.ini
  • %Program Files%\OneSafe PC Cleaner\German.ini
  • %Program Files%\OneSafe PC Cleaner\Italian.ini
  • %Program Files%\OneSafe PC Cleaner\Japanese.ini
  • %Program Files%\OneSafe PC Cleaner\Korean.ini
  • %Program Files%\OneSafe PC Cleaner\Norwegian.ini
  • %Program Files%\OneSafe PC Cleaner\OneSafePCCleaner.exe
  • %Program Files%\OneSafe PC Cleaner\OSPCNotifications.exe
  • %Program Files%\OneSafe PC Cleaner\Polish.ini
  • %Program Files%\OneSafe PC Cleaner\Portuguese.ini
  • %Program Files%\OneSafe PC Cleaner\SchedTasks.txt
  • %Program Files%\OneSafe PC Cleaner\Services1.txt
  • %Program Files%\OneSafe PC Cleaner\Services2.txt
  • %Program Files%\OneSafe PC Cleaner\SList.db
  • %Program Files%\OneSafe PC Cleaner\SList.txt
  • %Program Files%\OneSafe PC Cleaner\Spanish.ini
  • %Program Files%\OneSafe PC Cleaner\sqlite3.dll
  • %Program Files%\OneSafe PC Cleaner\Swedish.ini
  • %Program Files%\OneSafe PC Cleaner\Turkish.ini
  • %Program Files%\OneSafe PC Cleaner\UList.txt
  • %Program Files%\OneSafe PC Cleaner\OneSafePCCleaner.chm
  • %All Users Profile%\OneSafe PC Cleaner\Cookies.txt
  • %Desktop%\OneSafe PC Cleaner.lnk
  • %Common Programs%\OneSafe PC Cleaner\OneSafe PC Cleaner.lnk
  • %Common Programs%\OneSafe PC Cleaner\Help.lnk
  • %Common Programs%\OneSafe PC Cleaner\Check updates.lnk
  • %Common Programs%\OneSafe PC Cleaner\OneSafe PC Cleaner on the Web.lnk
  • %Common Programs%\OneSafe PC Cleaner\Uninstall OneSafe PC Cleaner.lnk

Step 6

Durchsuchen Sie Ihren Computer mit Ihrem Trend Micro Produkt, und löschen Sie Dateien, die als PUA.Win32.PCCleaner.AU entdeckt werden. Falls die entdeckten Dateien bereits von Ihrem Trend Micro Produkt gesäubert, gelöscht oder in Quarantäne verschoben wurden, sind keine weiteren Schritte erforderlich. Dateien in Quarantäne können einfach gelöscht werden. Auf dieser Knowledge-Base-Seite finden Sie weitere Informationen.


Participe da nossa pesquisa!