Free Removal Tool for OpenCloud Antivirus

Written by Administrator | Sunday, 04 September 2011 19:15

OpenCloud Antivirus is a another rogue Antispyware, it's a malware that pretends to be an Antivirus. OpenCloud Antivirus conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is OpenCloud Antivirus. OpenCloud Antivirus invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall OpenCloud Antivirus immediately from your system.

OpenCloud Antivirus

To remove OpenCloud Antivirus (Uninstall OpenCloud Antivirus)

Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
Choose Start computer in SAFE MODE with network support
Open Internet Explorer
Go to Tools => Internet Options => Connections Tab => LAN Settings
Uncheck "Use a proxy server"
Recheck "Automatically detect settings"
Download this free removal tool for OpenCloud Antivirus
Extract it
Launch
Click on the delete button

OpenCloud Antivirus will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

csrss.exe

Files :

%AppData%\OpenCloud Antivirus\csrss.exe
%Programs%\Startup\csrss.exe
%DesktopDir%\OpenCloud Antivirus.lnk
%Programs%\OpenCloud Antivirus\OpenCloud Antivirus.lnk
%Temp%\[RANDOM NUMBER].tmp

Registry

Created Registry Value :

HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\C0AB6693AB3202B4B9D95716ED5CE4A6\SourceList
- LastUsedSource = "n;1;%ProgramFiles%\Common Files\Wise Installation Wizard\3

Registry Values were modified:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\ServiceCurrent
- (Default) =
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceCurrent
- (Default) =

Remove OpenCloud Antivirus Software manually :

Restart your computer in safe mode :
- Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
- Choose Start computer in SAFE MODE
Open the infected account
Open explorer, paste into the address bar the text %Temp% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Temp on my computer
Remove all .exe files and all random folders under this path
Open explorer, paste into the address bar the text %AppData% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Application Data on my computer
Remove all .exe files and all random folders under this path and the OpenCloud Antivirus folder
Remove OpenCloud Antivirus.lnk from your desktop
Remove OpenCloud Antivirus.lnk from your start menu
Click on the start menu button then click on run
Type msconfig and press enter
Go to the Startup tab
Uncheck all random character keys in it and click on the OK button
Restart your computer in normal mode

This will solve the problem but you can run the removal tool to remove the other registry keys and values.

Comments

0 #4 Rex 2011-11-26 18:53

Thank you guys so much. This was very helpful

Quote

0 #3 2011-10-05 10:08

You are all welcome!

@BetterTasteTha nYou
Stay away from illegal site and porn site and don't click on an unknown link or something that requests you to install on your system or ask you weird thing.
Don't trust on any program that you didn't install.
Beware of supsicious link in an email even this email is from a friend.

Quote

+1 #2 2011-10-05 02:01

Very easy! Thank You! :)

Quote

0 #1 2011-10-04 22:43

Just wanted to thank you!!! So far so good. I have been freaking out for about 2 hours now. Since I installed your program i haven't had any popups or anything yet, the opencloud av shortcut and file location are still there, but I deleted them. hopefully they won't pop back up.
How exactly does one get this Open Cloud AV so I know not to make this mistake again.

Quote

Refresh comments list
RSS feed for comments to this post.