Jump to content

Removal instructions for PC Maestro Power Suite

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted (edited)
What is PC Maestro Power Suite?

The Malwarebytes research team has determined that PC Maestro Power Suite is a fake system optimizer. These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
More information can be found on our Malwarebytes Unpacked blog.

How do I know if I am infected with PC Maestro Power Suite?

This is how the main screen of the system optimizing application looks:

main.png

You will find these icons in your taskbar and on your desktop:

icons.png

and see these screens during "operations":

warning1.png

warning2.png

warning5.png

You may see this entry in your list of installed programs:

warning4.png

and these tasks in your Task Scheduler:

warning3.png

How did PC Maestro Power Suite get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was bundled with other software.

How do I remove PC Maestro Power Suite?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-{version}.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to:
    Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • If an update is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of PC Maestro Power Suite?
  • No, Malwarebytes' Anti-Malware removes PC Maestro Power Suite completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this system optimizer.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the PC Maestro Power Suite installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

 

protection1.png


Technical details for experts

You may see these entries in FRST logs:

  
 (CompuClever Systems Inc.) C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\ccmanagementservice.exe
 (CompuClever Systems Inc.) C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\pmc.exe
 R2 CCManagementService; C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\ccmanagementservice.exe [158352 2016-05-24] (CompuClever Systems Inc.)
 S1 CompuCleverBootor; C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\Bootor64.sys [24208 2016-05-04] (<Compuclever>)
 C:\Windows\System32\Tasks\PC Clean Maestro Scan
 C:\Windows\System32\Tasks\PC TuneUp Maestro Scan
 C:\Windows\System32\Tasks\PC TuneUp Maestro Disk Defrag Analysis
 C:\Windows\System32\Tasks\PC TuneUp Maestro Scan SecondTime
 C:\Windows\System32\Tasks\PC Clean Maestro Scan FirstTime
 C:\Windows\System32\Tasks\Program Management Console Startup
 C:\Windows\System32\Tasks\PC Clean Maestro Startup
 C:\Windows\System32\Tasks\PC TuneUp Maestro Startups
 C:\Users\{username}\Desktop\Program Management Console.lnk
 C:\Users\{username}\Desktop\PC TuneUp Maestro.lnk
 C:\Users\{username}\Desktop\PC Clean Maestro.lnk
 C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CompuClever
 C:\Users\{username}\AppData\Roaming\CompuClever
 C:\Users\{username}\AppData\Local\CompuClever
 C:\ProgramData\CompuClever
 C:\Program Files (x86)\CompuClever
 C:\Users\{username}\AppData\Local\Temp\programmanagementconsole_setup.exe

PC Clean Maestro (HKLM-x32\...\PC Clean Maestro) (Version: 4.3.3.158 - CompuClever Systems Inc.)
PC TuneUp Maestro (HKLM-x32\...\PC TuneUp Maestro) (Version: 7.0.3.326 - CompuClever Systems Inc.)
Program Management Console (HKCU\...\Program Management Console) (Version: 2.2.3.45 - CompuClever Systems Inc.)
Task: {0C2A13FB-CAAA-4F64-973C-C99BFAFD2007} - System32\Tasks\PC TuneUp Maestro Disk Defrag Analysis => C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\pctum.exe [2016-06-02] (CompuClever Systems Inc)
Task: {139AABF0-B5CF-4B13-94C5-56F645B245CE} - System32\Tasks\Program Management Console Startup => C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\pmc.exe [2016-05-24] (CompuClever Systems Inc.)
Task: {1B78A8F7-DF0D-4A78-9E4D-1136E6F9BF67} - System32\Tasks\PC TuneUp Maestro Startups => C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\Startups.exe [2016-06-02] (Compuclever System Inc)
Task: {43994695-151A-4CB6-802A-8794C9BA8DD0} - System32\Tasks\PC TuneUp Maestro Scan SecondTime => C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\pctum.exe [2016-06-02] (CompuClever Systems Inc)
Task: {518E7A7C-30E9-4D71-AB73-6EE03CF5B1C0} - System32\Tasks\PC TuneUp Maestro Scan => C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\pctum.exe [2016-06-02] (CompuClever Systems Inc)
Task: {952AACCC-8AE9-44E4-B6A5-981F6FE2ACA0} - System32\Tasks\PC Clean Maestro Startup => C:\Program Files (x86)\CompuClever\PC Clean Maestro\pccum.exe [2016-05-24] (CompuClever Systems Inc)
Task: {E225F1E1-37E1-4132-ACBC-2EF4393A9A60} - System32\Tasks\PC Clean Maestro Scan => C:\Program Files (x86)\CompuClever\PC Clean Maestro\pccum.exe [2016-05-24] (CompuClever Systems Inc)
Task: {EB43A46D-6306-4E87-9882-70DB85EB3657} - System32\Tasks\PC Clean Maestro Scan FirstTime => C:\Program Files (x86)\CompuClever\PC Clean Maestro\pccum.exe [2016-05-24] (CompuClever Systems Inc)
() C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\CommonLib_WTL.dll
Alterations made by the installer:
  
File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\CompuClever\PC Clean Maestro
       Adds the file ErrorReportSubmit.exe"="5/24/2016 4:07 AM, 884880 bytes, A
       Adds the file pccum.exe"="5/24/2016 4:07 AM, 5115024 bytes, A
       Adds the file SightOfUser.dll"="5/24/2016 4:03 AM, 257680 bytes, A
       Adds the file sqlite3.dll"="11/26/2011 9:42 AM, 568032 bytes, A
       Adds the file uninstall.exe"="10/10/2016 8:59 AM, 244264 bytes, A
    Adds the folder C:\Program Files (x86)\CompuClever\PC TuneUp Maestro
       Adds the file Bootor.sys"="5/4/2016 9:00 AM, 22160 bytes, A
       Adds the file Bootor64.sys"="5/4/2016 9:00 AM, 24208 bytes, A
       Adds the file ErrorReportSubmit.exe"="6/2/2016 4:18 AM, 884880 bytes, A
       Adds the file filextmgr.exe"="6/2/2016 4:19 AM, 409744 bytes, A
       Adds the file filextmgr.ini"="9/5/2014 8:49 AM, 69 bytes, A
       Adds the file launcher.pctumexe"="6/2/2016 4:18 AM, 77456 bytes, A
       Adds the file pctum.exe"="6/2/2016 4:18 AM, 8983184 bytes, A
       Adds the file RunUnknown.exe"="6/2/2016 4:19 AM, 122512 bytes, A
       Adds the file SightOfUser.dll"="6/2/2016 4:06 AM, 257680 bytes, A
       Adds the file Startups.exe"="6/2/2016 4:18 AM, 2440336 bytes, A
       Adds the file uninstall.exe"="10/10/2016 8:59 AM, 151631 bytes, A
    Adds the folder C:\ProgramData\CompuClever\PC Clean Maestro\Data
       Adds the file Rules.dat"="5/19/2016 10:26 AM, 38326 bytes, A
       Adds the file unwanted_plugin.dat"="9/15/2014 11:25 AM, 174048 bytes, A
       Adds the file unwanted_software.dat"="10/14/2014 11:31 AM, 376386 bytes, A
    Adds the folder C:\ProgramData\CompuClever\PC Clean Maestro\Images
    Adds the folder C:\ProgramData\CompuClever\PC TuneUp Maestro
       Adds the file wu_special_item.xml"="2/26/2016 9:33 AM, 2997 bytes, A
    Adds the folder C:\ProgramData\CompuClever\PC TuneUp Maestro\Data
       Adds the file startuplist.dat"="6/17/2015 3:21 AM, 633248 bytes, A
    Adds the folder C:\ProgramData\CompuClever\PC TuneUp Maestro\Images
    Adds the folder C:\Users\{username}\AppData\Local\CompuClever\Program Management Console
       Adds the file ccmanagementservice.exe"="5/24/2016 4:02 AM, 158352 bytes, A
       Adds the file ccmanagementservice_gui.exe"="5/24/2016 4:02 AM, 412304 bytes, A
       Adds the file CommonLib_WTL.dll"="5/24/2016 4:03 AM, 794256 bytes, A
       Adds the file Microsoft.VC120.CRT.manifest"="9/2/2015 9:23 AM, 481 bytes, A
       Adds the file msvcp120.dll"="9/2/2015 9:23 AM, 455328 bytes, A
       Adds the file msvcr120.dll"="9/2/2015 9:23 AM, 970912 bytes, A
       Adds the file pmc.exe"="5/24/2016 4:02 AM, 679568 bytes, A
       Adds the file SightOfUser.dll"="5/24/2016 4:03 AM, 257680 bytes, A
       Adds the file uninstall.exe"="10/10/2016 8:59 AM, 229200 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\Core
       Adds the file adstat.xml"="10/10/2016 8:59 AM, 8 bytes, A
       Adds the file core.ini"="10/10/2016 8:59 AM, 217 bytes, A
       Adds the file logs.xml"="10/10/2016 8:59 AM, 53 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\PC Clean Maestro
       Adds the file cleanup_cfg.dll"="10/10/2016 8:59 AM, 1836 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\PC TuneUp Maestro
       Adds the file ignorelist.xml"="10/10/2016 8:59 AM, 15 bytes, A
       Adds the file tuneup_cfg.dll"="10/10/2016 8:59 AM, 861 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\CompuClever\Program Management Console
    In the existing folder C:\Users\{username}\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
       Adds the file PC Clean Maestro.lnk"="10/10/2016 8:59 AM, 1220 bytes, A
       Adds the file PC TuneUp Maestro.lnk"="10/10/2016 8:59 AM, 1221 bytes, A
       Adds the file Program Management Console.lnk"="10/10/2016 8:59 AM, 1317 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CompuClever
       Adds the file CompuClever PC Clean Maestro.lnk"="10/10/2016 8:59 AM, 1232 bytes, A
       Adds the file CompuClever PC TuneUp Maestro.lnk"="10/10/2016 8:59 AM, 1239 bytes, A
       Adds the file Program Management Console.lnk"="10/10/2016 8:59 AM, 1329 bytes, A
    In the existing folder C:\Users\{username}\Desktop
       Adds the file PC Clean Maestro.lnk"="10/10/2016 8:59 AM, 1196 bytes, A
       Adds the file PC TuneUp Maestro.lnk"="10/10/2016 8:59 AM, 1197 bytes, A
       Adds the file Program Management Console.lnk"="10/10/2016 8:59 AM, 1315 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file PC Clean Maestro Scan"="10/10/2016 8:59 AM, 3802 bytes, A
       Adds the file PC Clean Maestro Scan FirstTime"="10/10/2016 8:59 AM, 3516 bytes, A
       Adds the file PC Clean Maestro Startup"="10/10/2016 8:59 AM, 3368 bytes, A
       Adds the file PC TuneUp Maestro Disk Defrag Analysis"="10/10/2016 8:59 AM, 3724 bytes, A
       Adds the file PC TuneUp Maestro Scan"="10/10/2016 8:59 AM, 3766 bytes, A
       Adds the file PC TuneUp Maestro Scan SecondTime"="10/10/2016 8:59 AM, 3522 bytes, A
       Adds the file PC TuneUp Maestro Startups"="10/10/2016 8:59 AM, 3332 bytes, A
       Adds the file Program Management Console Startup"="10/10/2016 8:59 AM, 3390 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Licenses\4778B3A4-DF4F-4625-AE57-DD3E77432DA1]
       "3725B9B1-8131-4f69-8457-4A1A277C5E9C"="REG_BINARY, ...................
       "43987299-D613-4eb5-97F1-DBEF5BF6A4FF"="REG_DWORD", 4
       "4E2A53A0-CB7D-4af7-A604-40F99F589ED5"="REG_BINARY, ...............'
       "5C14CDAF-D264-4484-AE85-46E6A7BFB4D6"="REG_DWORD", 7
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Licenses\5A026215-92FD-42fa-B2FA-CC11C3A798D4]
       "(Default)"="REG_SZ", "5A026215-92FD-42fa-B2FA-CC11C3A798D4"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Licenses\9029E338-175F-47ec-A426-0F3362EFF6A8]
       "(Default)"="REG_SZ", "9029E338-175F-47ec-A426-0F3362EFF6A8"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Licenses\9E4F1716-D5C6-42ea-8206-42E6EA44E8DE]
       "1223B17D-6707-49a7-A12F-1614CBC42FC0"="REG_DWORD", 4
       "43987299-D613-4eb5-97F1-DBEF5BF6A4FF"="REG_DWORD", 4
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\shell\openas\command]
       "(Default)" = REG_EXPAND_SZ, ""C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\filextmgr.exe" %1"
       "PC TuneUp Maestro.old"="REG_SZ", "%SystemRoot%\SysWow64\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\shell\opendlg\command]
       "(Default)" = REG_EXPAND_SZ, ""C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\filextmgr.exe" %1"
       "PC TuneUp Maestro.old"="REG_SZ", "%SystemRoot%\SysWow64\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PC Clean Maestro]
       "Contact"="REG_SZ", "PC Clean Maestro Support Team"
       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\CompuClever\PC Clean Maestro\pccum.exe"
       "DisplayName"="REG_SZ", "PC Clean Maestro"
       "DisplayVersion"="REG_SZ", "4.3.3.158"
       "EstimatedSize"="REG_DWORD", 6904
       "HelpLink"="REG_SZ", "http://www.compuclever.com/"
       "InstallDate"="REG_SZ", "20161010085908"
       "InstallLocation"="REG_SZ", "C:\Program Files (x86)\CompuClever\PC Clean Maestro\"
       "Lang"="REG_SZ", "en-us"
       "MajorVersion"="REG_SZ", "4"
       "MinorVersion"="REG_SZ", "3"
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "CompuClever Systems Inc."
       "QuietUninstallString"="REG_SZ", ""C:\Program Files (x86)\CompuClever\PC Clean Maestro\uninstall.exe" /S"
       "UninstallString"="REG_SZ", "C:\Program Files (x86)\CompuClever\PC Clean Maestro\uninstall.exe"
       "URLInfoAbout"="REG_SZ", "http://www.compuclever.com/"
       "URLUpdateInfo"="REG_SZ", "http://www.compuclever.com/"
       "VendorID"="REG_SZ", "CompuClever"
       "Version"="REG_SZ", "4.3.3.158"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PC TuneUp Maestro]
       "Contact"="REG_SZ", "PC TuneUp Maestro Support Team"
       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\pctum.exe"
       "DisplayName"="REG_SZ", "PC TuneUp Maestro"
       "DisplayVersion"="REG_SZ", "7.0.3.326"
       "EstimatedSize"="REG_DWORD", 13060
       "HelpLink"="REG_SZ", "http://www.compuclever.com/"
       "InstallDate"="REG_SZ", "20161010085926"
       "InstallLocation"="REG_SZ", "C:\Program Files (x86)\CompuClever\PC TuneUp Maestro"
       "Lang"="REG_SZ", "en-us"
       "MajorVersion"="REG_SZ", "7"
       "MinorVersion"="REG_SZ", "0"
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "CompuClever Systems Inc."
       "QuietUninstallString"="REG_SZ", ""C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\uninstall.exe" /S"
       "UninstallString"="REG_SZ", "C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\uninstall.exe"
       "URLInfoAbout"="REG_SZ", "http://www.compuclever.com/"
       "URLUpdateInfo"="REG_SZ", "http://www.compuclever.com/"
       "VendorID"="REG_SZ", "CompuClever"
       "Version"="REG_SZ", "7.0.3.326"
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CCManagementService]
       "Description"="REG_SZ", "Provides services related to product licensing, reminder, and communication for all CompuClever applications. Termination of this service will cause issues related to product licensing, product updates, scans, and prevent CompuClever applications function properly as designed."
       "DisplayName"="REG_SZ", "CompuClever Management Service"
       "ErrorControl"="REG_DWORD", 1
       "FailureActions"="REG_BINARY, ......................
       "ImagePath"="REG_EXPAND_SZ, ""C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\ccmanagementservice.exe""
       "ObjectName"="REG_SZ", "LocalSystem"
       "Start"="REG_DWORD", 2
       "Type"="REG_DWORD", 272
       "WOW64"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CompuCleverBootor]
       "DisplayName"="REG_SZ", "CompuCleverBootor"
       "ErrorControl"="REG_DWORD", 0
       "ImagePath"="REG_EXPAND_SZ, "\??\C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\Bootor64.sys"
       "Start"="REG_DWORD", 1
       "Type"="REG_DWORD", 1
       "WOW64"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\CompuClever\Core]
       "uid"="REG_SZ", "{AADC862A-4F20-49C4-9BC7-41E6FC8AEA86}"
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Program Management Console]
       "Contact"="REG_SZ", "Program Management Console Support Team"
       "DisplayIcon"="REG_SZ", "C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\pmc.exe"
       "DisplayName"="REG_SZ", "Program Management Console"
       "DisplayVersion"="REG_SZ", "2.2.3.45"
       "EstimatedSize"="REG_DWORD", 3865
       "HelpLink"="REG_SZ", "http://www.compuclever.com/"
       "InstallLocation"="REG_SZ", "C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\"
       "MajorVersion"="REG_SZ", "2"
       "MinorVersion"="REG_SZ", "2"
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "CompuClever Systems Inc."
       "QuietUninstallString"="REG_SZ", ""C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\uninstall.exe" /S"
       "UninstallString"="REG_SZ", "C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\uninstall.exe"
       "URLInfoAbout"="REG_SZ", "http://www.compuclever.com/"
       "URLUpdateInfo"="REG_SZ", "http://www.compuclever.com/"
       "Version"="REG_SZ", "2.2.3.45"
Malwarebytes Anti-Malware log:
  
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 10/10/2016
Scan Time: 9:12 AM
Logfile: mbamPCMaestroPowerSuite.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.10.06.03
Rootkit Database: v2016.09.26.02
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Enabled
Self-protection: Enabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 323601
Time Elapsed: 8 min, 54 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 2
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\ccmanagementservice.exe, 864, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd]
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\pmc.exe, 3620, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd]

Modules: 7
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\CommonLib_WTL.dll, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\CommonLib_WTL.dll, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\msvcp120.dll, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\msvcp120.dll, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\msvcr120.dll, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\msvcr120.dll, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\SightOfUser.dll, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 

Registry Keys: 13
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Clean Maestro Scan, Delete-on-Reboot, [8f6c8e0703979d9904a1fa0ce520619f], 
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Clean Maestro Scan FirstTime, Delete-on-Reboot, [6695cacb504a43f3dbcafd090302946c], 
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Clean Maestro Startup, Delete-on-Reboot, [8972bbda7b1f15219510e422ea1b748c], 
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC TuneUp Maestro Disk Defrag Analysis, Delete-on-Reboot, [9665ade8ddbdaf87b1f3da2ca16413ed], 
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC TuneUp Maestro Scan, Delete-on-Reboot, [e21996ff5a40d066079d2fd785807090], 
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC TuneUp Maestro Scan SecondTime, Delete-on-Reboot, [a2594d48efabaa8c822254b209fc7987], 
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC TuneUp Maestro Startup, Delete-on-Reboot, [8d6ed1c4aceeda5cb4f0ea1c9174956b], 
PUP.Optional.CompuClever, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC TuneUp Maestro Startups, Delete-on-Reboot, [12e9aaeb9a005adcc8dc4db922e33fc1], 
PUP.Optional.CompuClever, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CCManagementService, Quarantined, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Program Management Console, Quarantined, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PC Clean Maestro, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CompuCleverBootor, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PC TuneUp Maestro, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 18
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever, Delete-on-Reboot, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC Clean Maestro, Delete-on-Reboot, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC TuneUp Maestro, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever, Delete-on-Reboot, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro, Delete-on-Reboot, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Data, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Images, Delete-on-Reboot, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC TuneUp Maestro, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC TuneUp Maestro\Data, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC TuneUp Maestro\Images, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever, Delete-on-Reboot, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\Core, Delete-on-Reboot, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\PC Clean Maestro, Quarantined, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\PC TuneUp Maestro, Quarantined, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\Program Management Console, Quarantined, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CompuClever, Quarantined, [da213263bbdf181e77313bcbc73ea45c], 

Files: 69
PUP.Optional.CompuClever, C:\Users\{username}\Desktop\pcmaestropowersuite_setup10.exe, Quarantined, [06f5eda87b1f3bfb24a616f0c342748c], 
PUP.Optional.CompuClever, C:\Users\{username}\Desktop\PC Clean Maestro.lnk, Quarantined, [18e35d38b9e1de58207d2dd9ad58da26], 
PUP.Optional.CompuClever, C:\Users\{username}\Desktop\PC TuneUp Maestro.lnk, Quarantined, [fb00504518824aec5648b551e2231fe1], 
PUP.Optional.CompuClever, C:\Windows\System32\Tasks\PC TuneUp Maestro Disk Defrag Analysis, Quarantined, [bb403b5a99015adc257e60a615f041bf], 
PUP.Optional.CompuClever, C:\Windows\System32\Tasks\PC TuneUp Maestro Scan, Quarantined, [01fa2e6758424de9683b679fcb3ad828], 
PUP.Optional.CompuClever, C:\Windows\System32\Tasks\PC TuneUp Maestro Scan SecondTime, Quarantined, [51aaeea724769a9cf3b0b55106ff60a0], 
PUP.Optional.CompuClever, C:\Windows\System32\Tasks\PC TuneUp Maestro Startup, Quarantined, [06f5b0e52971ba7cedb6e12558adb64a], 
PUP.Optional.CompuClever, C:\Windows\System32\Tasks\PC TuneUp Maestro Startups, Quarantined, [34c7138236643afcbde6a85e8a7b0df3], 
PUP.Optional.CompuClever, C:\Windows\System32\Tasks\PC Clean Maestro Scan, Quarantined, [dd1e296c85152b0becbbf80ed233639d], 
PUP.Optional.CompuClever, C:\Windows\System32\Tasks\PC Clean Maestro Scan FirstTime, Quarantined, [718a6134d4c6e155644324e259ac738d], 
PUP.Optional.CompuClever, C:\Windows\System32\Tasks\PC Clean Maestro Startup, Quarantined, [5aa14451d5c5b581f7b09a6cf90ca957], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\ccmanagementservice.exe, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\ccmanagementservice_gui.exe, Quarantined, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\CommonLib_WTL.dll, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\Microsoft.VC120.CRT.manifest, Quarantined, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\msvcp120.dll, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\msvcr120.dll, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\pmc.exe, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\SightOfUser.dll, Delete-on-Reboot, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Local\CompuClever\Program Management Console\uninstall.exe, Quarantined, [eb10fb9a5f3bb086118ec73fea1b33cd], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC Clean Maestro\ErrorReportSubmit.exe, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC Clean Maestro\pccum.exe, Delete-on-Reboot, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC Clean Maestro\SightOfUser.dll, Delete-on-Reboot, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC Clean Maestro\sqlite3.dll, Delete-on-Reboot, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC Clean Maestro\uninstall.exe, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\Bootor.sys, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\Bootor64.sys, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\ErrorReportSubmit.exe, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\filextmgr.exe, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\filextmgr.ini, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\launcher.pctumexe, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\pctum.exe, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\RunUnknown.exe, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\SightOfUser.dll, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\Startups.exe, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\Program Files (x86)\CompuClever\PC TuneUp Maestro\uninstall.exe, Quarantined, [a556fa9bc0da93a3c6dad630e61f768a], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Data\Rules.dat, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Data\unwanted_plugin.dat, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Data\unwanted_software.dat, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Images\Chat and Instant Messaging History.png, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Images\Installer Files.png, Delete-on-Reboot, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Images\Internet Browsing History.png, Delete-on-Reboot, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Images\Log Files.png, Delete-on-Reboot, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Images\Multimedia History.png, Delete-on-Reboot, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Images\Other(Cache,Error Reports,Dump files...).png, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Images\Potential Personal Identity Information.png, Delete-on-Reboot, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Images\Recycle Bin.png, Delete-on-Reboot, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Images\Saved Forms Entry Data.png, Delete-on-Reboot, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Images\Temporary Files & Download Files.png, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC Clean Maestro\Images\Windows & Application History .png, Delete-on-Reboot, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC TuneUp Maestro\wu_special_item.xml, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC TuneUp Maestro\Data\startuplist.dat, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC TuneUp Maestro\Images\wintools_program_32x32.png, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC TuneUp Maestro\Images\wintools_taskmanage_32x32.png, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC TuneUp Maestro\Images\wintool_controlpanel_32x32.png, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC TuneUp Maestro\Images\wintool_service.png, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\ProgramData\CompuClever\PC TuneUp Maestro\Images\wintool_taskscheduler_32x32.png, Quarantined, [28d3cacbe1b951e5346dab5b669f3cc4], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\Core\adstat.xml, Quarantined, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\Core\core.ini, Quarantined, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\Core\expired.xml, Quarantined, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\Core\logs.xml, Quarantined, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\Core\update.xml, Quarantined, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\Core\{b80e58fb-12ce-4820-8644-95ed97b7005b}.log, Quarantined, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\PC Clean Maestro\cleanup_cfg.dll, Quarantined, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\PC TuneUp Maestro\ignorelist.xml, Quarantined, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\CompuClever\PC TuneUp Maestro\tuneup_cfg.dll, Quarantined, [f407583d990169cde5bccc3ad332956b], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CompuClever\CompuClever PC Clean Maestro.lnk, Quarantined, [da213263bbdf181e77313bcbc73ea45c], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CompuClever\CompuClever PC TuneUp Maestro.lnk, Quarantined, [da213263bbdf181e77313bcbc73ea45c], 
PUP.Optional.CompuClever, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CompuClever\Program Management Console.lnk, Quarantined, [da213263bbdf181e77313bcbc73ea45c], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Edited by Metallica
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.