PCCleaner 2007
PCCleaner 2007 is also a clone of another rogue program called DriveCleaner. So much so, that the developers forgot to remove a reference to DriveCleaner in the PC Cleaner scan summary screen. This reference can be seen in the image below.
DriveCleaner Reference
O4 - HKCU\..\Run: [PCCleaner] \SysCleaner.exe
Add or Remove Programs Entry
PCCleaner2007 Revision History
07/31/07 - Guide creation
Removal Instructions: In order to remove this infection we will need to use HijackThis to manually remove the infection:
- Print out these instructions as later in the fix we will need to shutdown
every window that is open.
- Enter the Windows Control Panel and double-click on Add/Remove Programs.
- When the installed programs list appears, double-click on the entry for
PCCleaner2007 if it exists
and allow the uninstall program to finish. Then exit the Add/Remove Programs
screen and the Control Panel.
- Download HijackThis from here
and extract it to c:\hijackthis.
- Close all windows, even this Internet Explorer window.
- Navigate to the c:\hijackthis directory and double-click on HijackThis.exe
- When the program starts, click on the Scan button.
- Put a checkmark next to the following entry (There may be more than
one of each):
O4 - HKCU\..\Run: [PCCleaner] \SysCleaner.exe
- Then click the Fix button
- Put a checkmark next to the following entry (There may be more than
one of each):
- Exit HijackThis.
- Reboot your computer into Safe
Mode
- Delete the following directories if they exist:
C:\Program Files\PCCleaner2007\
- Reboot your computer back to normal mode.
How to remove the Vundo infection Your computer should now be free of PCCleaner 2007.
This is a self-help guide. Use at your own risk.
BleepingComputer.com can not be held responsible for problems that may occur by using this information. If you would like help with any of these fixes, you can post a HijackThis log in our HijackThis Logs and Analysis forum.
If you have any questions about this self-help guide then please post those questions in our AntiVirus, Firewall and Privacy Products and Protection Methods forum and someone will help you.