CleanupTool

Alias: Cleanup Tool

Description: CleanupTool is a rogue anti-spyware program and clone of Clean PC Tool, SystemErrorFixer, ProtectingTool and WinPcDoctor. Your computer may have been infected by Zlob trojan and Vundo trojan or you may have downloaded CleanupTool yourself from a malicious website http://www.cleanuptool.com. CleanupTool displays fake popups and system alert messages informing you about supposed spyware infections. CleanupTool scares the user in order to offer full program version to get rid of the threats. CleanupTool may slow down your computer's performance and may install additional spyware.

Threat type:

Ransomware - Ransomware is a software application that infects a computer and asks for money to have the infection removed.

Trojan - A Trojans or Trojan Horse is any programs that installs itself secretly, quite often with sinister intent. Once installed, the trojan author (hacker) can gain complete control of the infected PC. Trojans are usually designed to steal sensitive information and/or destroy the system. Trojans can be distributed as unsolicited email attachments, or bundled with freeware and shareware programs.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer or your privacy.

Detection:
SpyNoMore detects CleanupTool: Yes

Threat risk: Very High Risk

Extremely dangerous malware. Uses stealth installation, randomly named entries and has the capability to self update or resurrect after incomplete removal. Almost impossible to remove manually. Category mostly consists of trojans and spyware.

Symptoms:

Fake security popup warnings

Fake scan results

Computer's performance slow down

CleanupTool Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with CleanupTool, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
SysRep.exe

File Signatures:
%ProgramFiles%\CleanupTool\SysRep.exe
%ProgramFiles%\CleanupTool\unins000.exe
%ProgramFiles%\CleanupTool\atl71.dll

Registered Dll (Dynamic Link Library) Signatures:
atl71.dll

Folder Signatures:
%ProgramFiles%\CleanupTool\

Registry Signatures:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CleanupTool

SpyNoMore Collected Residual File Signatures:
N/A

See Also:
homepagetoday.com
registrydefender.com
VirusRemover2008
AXPDefender
Internet Antivirus
homesiteurls.com
MS Antivirus
RealSpyMonitor
homesecuresite.com
AvPro2008