Recommended Posts

What is MyCleanPC?

The Malwarebytes research team has determined that MyCleanPC is a "system optimizer". These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
More information can be found on our Malwarebytes Labs blog.

How do I know if I am infected with MyCleanPC?

This is how the main screen of the sytem optimizer looks:

main.png

You will find these icons in your taskbar and on your desktop:

icons.png

and see these warnings during install:

warning1.png

warning2.png

and these screens during "operations":

warning6.png

warning7.png

You may see this entry in your list of installed programs:

warning4.png

and these Scheduled Tasks:

warning3.png

How did MyCleanPC get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was downloaded from their site.

How do I remove MyCleanPC?

Our program Malwarebytes can detect and remove this potentially unwanted application.
  • Please download Malwarebytes to your desktop.
  • Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
  • Then click Finish.
  • Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
  • If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of MyCleanPC?
  • No, Malwarebytes removes MyCleanPC completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this system optimizer.

As you can see below the full version of Malwarebytes would have protected you against the MyCleanPC installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

 

protection1.png


and we block access to their domain:
 

protection2.png


Technical details for experts

You may see these entries in FRST logs:

 
 (USTechSupport, LLC (www.ustechsupport.com)) C:\Program Files (x86)\USTechSupport\MCPPCO\ustpcopt.exe
 (USTechSupport, LLC (www.ustechsupport.com)) C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOPrivacyProtector.exe
 (USTechSupport, LLC (www.ustechsupport.com)) C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOSystemCleaner.exe
 (USTechSupport, LLC (www.ustechsupport.com)) C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCO_RC.exe
 (USTechSupport, LLC (www.ustechsupport.com)) C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCODiskOptimizer.exe
 (USTechSupport, LLC (www.ustechsupport.com)) C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCODefragSrv64.exe
 R2 USTSPCODiskOptimizer; C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCODefragSrv64.exe [2266680 2017-04-27] (USTechSupport, LLC (www.ustechsupport.com))
 C:\Windows\System32\Tasks\USTSPCO-USTSPCOOneClickCare
 C:\Windows\System32\Tasks\MyCleanPC PC Optimizer
 C:\Windows\System32\Tasks\LAUNCH CDPCO
 C:\Windows\Tasks\USTSPCO-USTSPCOOneClickCare.job
 C:\Users\{username}\AppData\Roaming\USTechSupport
 C:\Users\Public\Desktop\MyCleanPC PC Optimizer.lnk
 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyCleanPC
 C:\Program Files (x86)\USTechSupport
 C:\ProgramData\USTechSupport

MyCleanPC PC Optimizer (HKLM-x32\...\{1EBF37B1-7B87-43C8-9DB7-11AD9920E948}_is1) (Version:  - USTechSupport)
Task: {B51F4334-7FD9-43CA-88CB-CF81BF314C14} - System32\Tasks\MyCleanPC PC Optimizer => C:\Program Files (x86)\USTechSupport\MCPPCO\ustpcopt.exe [2017-04-27] (USTechSupport, LLC (www.ustechsupport.com))
Task: {C1182FB3-D4A8-4D35-A7F9-2E08C426CFA6} - System32\Tasks\LAUNCH CDPCO => C:\Program Files (x86)\USTechSupport\MCPPCO\ustpcopt.exe [2017-04-27] (USTechSupport, LLC (www.ustechsupport.com))
Task: {C83AA56C-CBAF-45F3-B6F0-E8BB7E947A01} - System32\Tasks\USTSPCO-USTSPCOOneClickCare => C:\Program Files (x86)\USTechSupport\MCPPCO\ustpcopt.exe [2017-04-27] (USTechSupport, LLC (www.ustechsupport.com))
Task: C:\Windows\Tasks\USTSPCO-USTSPCOOneClickCare.job => C:\Program Files (x86)\USTechSupport\MCPPCO\ustpcopt.exe
() C:\Program Files (x86)\USTechSupport\MCPPCO\asohtm.dll
() C:\Program Files (x86)\USTechSupport\MCPPCO\sqlite3.dll
Alterations made by the installer:
 
File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\USTechSupport\MCPPCO
       Adds the file 1.ico"="6/12/2012 3:36 PM, 101257 bytes, A
       Adds the file 2.ico"="6/21/2012 11:11 AM, 163279 bytes, A
       Adds the file 3.ico"="6/21/2012 11:26 AM, 120755 bytes, A
       Adds the file 4.ico"="10/2/2012 5:47 PM, 302312 bytes, A
       Adds the file 5.ico"="5/17/2013 1:28 PM, 49770 bytes, A
       Adds the file 6.ico"="8/26/2013 10:51 AM, 58438 bytes, A
       Adds the file ASEng.dll"="4/27/2017 5:59 AM, 1761336 bytes, A
       Adds the file AsInvoker.exe"="4/27/2017 5:59 AM, 226360 bytes, A
       Adds the file aso.ini"="4/7/2017 1:02 PM, 98132 bytes, A
       Adds the file asohtm.dll"="4/27/2017 5:59 AM, 335416 bytes, A
       Adds the file asores.dll"="4/27/2017 5:59 AM, 8521784 bytes, A
       Adds the file atl100.dll"="2/28/2014 6:10 PM, 138056 bytes, A
       Adds the file checkupdate.ini"="4/6/2017 11:46 AM, 6208 bytes, A
       Adds the file client.ini"="4/6/2017 11:47 AM, 68608 bytes, A
       Adds the file DiskOpt.ini"="4/6/2017 11:46 AM, 10151 bytes, A
       Adds the file Downloader.dll"="4/27/2017 5:59 AM, 81464 bytes, A
       Adds the file FileList.pcp"="12/1/2015 6:17 PM, 13612 bytes, A
       Adds the file HighestAvailable.exe"="4/27/2017 5:59 AM, 251448 bytes, A
       Adds the file mfc100chs.dll"="2/28/2014 6:10 PM, 36176 bytes, A
       Adds the file mfc100cht.dll"="2/28/2014 6:10 PM, 36176 bytes, A
       Adds the file mfc100deu.dll"="2/28/2014 6:10 PM, 64336 bytes, A
       Adds the file mfc100enu.dll"="2/28/2014 6:10 PM, 55120 bytes, A
       Adds the file mfc100esn.dll"="2/28/2014 6:10 PM, 63824 bytes, A
       Adds the file mfc100fra.dll"="2/28/2014 6:10 PM, 64336 bytes, A
       Adds the file mfc100ita.dll"="2/28/2014 6:10 PM, 62288 bytes, A
       Adds the file mfc100jpn.dll"="2/28/2014 6:10 PM, 43856 bytes, A
       Adds the file mfc100kor.dll"="2/28/2014 6:10 PM, 43344 bytes, A
       Adds the file mfc100rus.dll"="2/28/2014 6:10 PM, 60752 bytes, A
       Adds the file mfc100u.dll"="2/28/2014 6:10 PM, 4422992 bytes, A
       Adds the file Microsoft.VC90.ATL.manifest"="2/28/2014 6:10 PM, 353 bytes, A
       Adds the file Microsoft.VC90.CRT.manifest"="2/28/2014 6:10 PM, 391 bytes, A
       Adds the file Microsoft.VC90.MFC.manifest"="2/28/2014 6:10 PM, 349 bytes, A
       Adds the file Microsoft.VC90.MFCLOC.manifest"="2/28/2014 6:10 PM, 670 bytes, A
       Adds the file msvcp100.dll"="2/28/2014 6:10 PM, 421200 bytes, A
       Adds the file msvcr100.dll"="2/28/2014 6:10 PM, 773968 bytes, A
       Adds the file privprotector.ini"="4/6/2017 11:53 AM, 22225 bytes, A
       Adds the file regclean.ini"="4/29/2016 5:52 PM, 42649 bytes, A
       Adds the file RegList.pcp"="12/1/2015 6:16 PM, 92210 bytes, A
       Adds the file regopt.ini"="4/29/2016 5:52 PM, 6690 bytes, A
       Adds the file RequireAdministrator.exe"="4/27/2017 5:59 AM, 226360 bytes, A
       Adds the file sqlite3.dll"="4/27/2017 5:59 AM, 578000 bytes, A
       Adds the file sysclean.ini"="4/6/2017 11:53 AM, 12334 bytes, A
       Adds the file sysfilebackres.ini"="4/29/2016 5:52 PM, 12944 bytes, A
       Adds the file unins000.dat"="5/12/2017 11:56 AM, 63749 bytes, A
       Adds the file unins000.exe"="5/12/2017 11:56 AM, 1287736 bytes, A
       Adds the file unins000.msg"="5/12/2017 11:56 AM, 22701 bytes, A
       Adds the file unrar.dll"="4/27/2017 5:59 AM, 184376 bytes, A
       Adds the file ustpcopt.exe"="4/27/2017 5:59 AM, 11655224 bytes, A
       Adds the file USTSPCO_RC.exe"="4/27/2017 5:59 AM, 995384 bytes, A
       Adds the file USTSPCOCheckUpdate.exe"="4/27/2017 5:59 AM, 3263032 bytes, A
       Adds the file USTSPCODefragSrv.exe"="4/27/2017 5:59 AM, 1678392 bytes, A
       Adds the file USTSPCODefragSrv64.exe"="4/27/2017 5:59 AM, 2266680 bytes, A
       Adds the file USTSPCODiskOptimizer.exe"="4/27/2017 5:59 AM, 309304 bytes, A
       Adds the file USTSPCOHelper.dll"="4/27/2017 5:59 AM, 938040 bytes, A
       Adds the file USTSPCOPrivacyProtector.exe"="4/27/2017 5:59 AM, 1563704 bytes, A
       Adds the file USTSPCOsys.dll"="4/7/2017 5:33 PM, 2363392 bytes, A
       Adds the file USTSPCOSysFileBakRes.exe"="4/27/2017 5:59 AM, 598584 bytes, A
       Adds the file USTSPCOSystemCleaner.exe"="4/27/2017 5:59 AM, 1487416 bytes, A
       Adds the file xmllite.dll"="4/27/2017 5:59 AM, 142904 bytes, A
       Adds the file zlibwapi.dll"="4/27/2017 5:59 AM, 130616 bytes, A
    Adds the folder C:\Program Files (x86)\USTechSupport\MCPPCO\DefragReport
       Adds the file footer_left.jpg"="6/19/2012 12:02 PM, 13605 bytes, A
       Adds the file footer_middle.jpg"="6/19/2012 12:02 PM, 10048 bytes, A
       Adds the file footer_right.jpg"="6/19/2012 12:02 PM, 13629 bytes, A
       Adds the file left_border.jpg"="6/19/2012 12:02 PM, 13367 bytes, A
       Adds the file line3px_Blue.jpg"="6/19/2012 12:02 PM, 11194 bytes, A
       Adds the file Report_header_left_image.jpg"="6/19/2012 12:03 PM, 14693 bytes, A
       Adds the file Report_header_leftText.jpg"="6/19/2012 12:02 PM, 16078 bytes, A
       Adds the file Report_header_top_middle.jpg"="6/19/2012 12:02 PM, 9915 bytes, A
       Adds the file Report_header_top_right.jpg"="6/19/2012 12:02 PM, 15608 bytes, A
       Adds the file right_border.jpg"="6/19/2012 12:03 PM, 13367 bytes, A
    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyCleanPC\PC Optimizer
       Adds the file MyCleanPC PC Optimizer.lnk"="5/12/2017 11:56 AM, 1321 bytes, A
       Adds the file Uninstall MyCleanPC PC Optimizer.lnk"="5/12/2017 11:56 AM, 1275 bytes, A
    Adds the folder C:\ProgramData\USTechSupport\Log
       Adds the file MyCleanPC_CustomerSupport.log"="5/12/2017 11:55 AM, 0 bytes, A
       Adds the file MyCleanPC_Debug.log"="5/12/2017 11:56 AM, 12793 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\USTechSupport\PC Optimizer\Checking for Updates\AppUpdates
       Adds the file LatestVersion.htm"="5/12/2017 11:57 AM, 112 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\USTechSupport\PC Optimizer\Registry Cleaner
       Adds the file log_05-12-2017.log"="5/12/2017 11:59 AM, 0 bytes, A
    In the existing folder C:\Users\Public\Desktop
       Adds the file MyCleanPC PC Optimizer.lnk"="5/12/2017 11:56 AM, 1251 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file LAUNCH CDPCO"="5/12/2017 11:57 AM, 2992 bytes, A
       Adds the file MyCleanPC PC Optimizer"="5/12/2017 11:57 AM, 3156 bytes, A
       Adds the file USTSPCO-USTSPCOOneClickCare"="5/12/2017 11:57 AM, 3318 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file USTSPCO-USTSPCOOneClickCare.job"="5/12/2017 11:57 AM, 440 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}]
       "(Default)"="REG_SZ", "SystemDataCollectorSetCollection"
       "AppID"="REG_SZ", "{03837503-098b-11d8-9414-505054503030}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\AmrnI]
       "(Default)"="REG_SZ", "SMezUUSyjStZ_rb]ZDNu"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\InprocServer32]
       "(Default)"="REG_EXPAND_SZ, "%SystemRoot%\SysWow64\pla.dll"
       "ThreadingModel"="REG_SZ", "both"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\jwVpm]
       "(Default)"="REG_SZ", "H@|KwH_^jS{HtbePyN"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\kmnSjq]
       "(Default)"="REG_SZ", "~AplgvEJJNBz\Szq]"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\LocalServer32]
       "(Default)"="REG_EXPAND_SZ, "%SystemRoot%\SysWow64\plasrv.exe"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\ltgnMhnxkq]
       "(Default)"="REG_SZ", "]ShwmM]W{W_aM`}g\jAgN\XtJVwV]\US"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\MkcecI]
       "(Default)"="REG_SZ", "NCRj\TjIRNZ`m{Xz"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\ProgID]
       "(Default)"="REG_SZ", "PLA.SystemDataCollectorSetCollection.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\RVKgpjt]
       "(Default)"="REG_SZ", "ppBR]_KP]{uoWIYOsC"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\smpoD]
       "(Default)"="REG_SZ", "rasyZYYLOhImHLzHFTcd|DP"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\TypeLib]
       "(Default)"="REG_SZ", "{03837500-098B-11D8-9414-505054503030}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\uswm]
       "(Default)"="REG_SZ", "gIMuf[~~FopEacPpr`D"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\Version]
       "(Default)"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "PLA.SystemDataCollectorSetCollection"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}\zrez]
       "(Default)"="REG_SZ", "{hVh`oQRlU~WRBveLPb\hSB^vIn[T"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
       "USTSPCO-USTSPCOOneClickCare.job"="REG_BINARY, ................................
       "USTSPCO-USTSPCOOneClickCare.job.fp"="REG_DWORD", -1758608122
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1EBF37B1-7B87-43C8-9DB7-11AD9920E948}_is1]
       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\USTechSupport\MCPPCO\1.ico"
       "DisplayName"="REG_SZ", "MyCleanPC PC Optimizer"
       "EstimatedSize"="REG_DWORD", 178384
       "HelpLink"="REG_SZ", "http://www.ustechsupport.com/"
       "Inno Setup: App Path"="REG_SZ", "C:\Program Files (x86)\USTechSupport\MCPPCO"
       "Inno Setup: Icon Group"="REG_SZ", "USTechSupport\MCPPCO"
       "Inno Setup: Language"="REG_SZ", "english"
       "Inno Setup: Setup Version"="REG_SZ", "5.5.6 (u)"
       "Inno Setup: User"="REG_SZ", "{username}"
       "InstallDate"="REG_SZ", "20170512"
       "InstallLocation"="REG_SZ", "C:\Program Files (x86)\USTechSupport\MCPPCO\"
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "USTechSupport"
       "QuietUninstallString"="REG_SZ", ""C:\Program Files (x86)\USTechSupport\MCPPCO\unins000.exe" /SILENT"
       "UninstallString"="REG_SZ", ""C:\Program Files (x86)\USTechSupport\MCPPCO\unins000.exe""
       "URLInfoAbout"="REG_SZ", "http://www.ustechsupport.com/"
       "URLUpdateInfo"="REG_SZ", "http://www.ustechsupport.com/"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\USTechSupport\PC Optimizer]
       "Brand"="REG_SZ", "mcp"
       "Campaign"="REG_SZ", "mcp_sem_023"
       "InstallDate"="REG_SZ", "05-12-2017 11:56 am"
       "InstalledPath"="REG_SZ", "C:\Program Files (x86)\USTechSupport\MCPPCO"
       "InstalledSuccessfully"="REG_DWORD", 1
       "InstallerVersion"="REG_SZ", "1.0.9.0"
       "InstallPath"="REG_SZ", "<CSIDL_PROGRAMFILES>\USTechSupport\PC Optimizer"
       "PurchaseURL"="REG_SZ", "https://shop.ustechsupport.com/carts/?sc=mcp_sem_023&pr=pco&sid=b677a010-11c0-0135-4d30-0e794138efc0"
       "SessionId"="REG_SZ", "b677a010-11c0-0135-4d30-0e794138efc0"
       "SKU"="REG_SZ", "pcof"
       "SupportPhoneNumber"="REG_SZ", "(888) 590-8910"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\USTechSupport\PC Optimizer\LANG]
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\USTSPCODiskOptimizer]
       "DisplayName"="REG_SZ", "USTSPCODiskOptimizer"
       "ErrorControl"="REG_DWORD", 1
       "ImagePath"="REG_EXPAND_SZ, "C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCODefragSrv64.exe"
       "ObjectName"="REG_SZ", "LocalSystem"
       "Start"="REG_DWORD", 2
       "Type"="REG_DWORD", 16
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\Disk Defrag\C]
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\LANG]
       "LangID"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\MyCleanPC PC Optimizer]
       "FirstRunASO"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\MyCleanPC PC Optimizer\OneClick]
       "chkAntispyware"="REG_DWORD", 0
       "chkDiskDefrag"="REG_DWORD", 1
       "chkDriverupdater"="REG_DWORD", 0
       "chkJunkFileCleaner"="REG_DWORD", 1
       "chkPrivacyProtector"="REG_DWORD", 1
       "chkRegClean"="REG_DWORD", 1
       "chkRegOptimizer"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\MyCleanPC PC Optimizer\Scheduler\OneClick]
       "chkAntispyware"="REG_DWORD", 0
       "chkAutoShutDown"="REG_DWORD", 0
       "chkDiskDefrag"="REG_DWORD", 1
       "chkDriverupdater"="REG_DWORD", 0
       "chkFixErrorsAuto"="REG_DWORD", 0
       "chkJunkFileCleaner"="REG_DWORD", 1
       "chkPrivacyProtector"="REG_DWORD", 1
       "chkRegClean"="REG_DWORD", 1
       "chkRegOptimizer"="REG_DWORD", 1
       "chkScheduleSPC"="REG_DWORD", 1
       "cmbDay"="REG_DWORD", 5
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\MyCleanPC PC Optimizer\SPC_RESULTS]
       "Disk Optimizer"="REG_DWORD", 0
       "Privacy Protector"="REG_DWORD", 264
       "Registry Cleaner"="REG_DWORD", 2
       "Registry Optimizer"="REG_DWORD", 0
       "System Cleaner"="REG_DWORD", 464
       "TotalErrors"="REG_DWORD", 730
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\OneClickCure\Privacy Protector]
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\OneClickCure\PrivPro]
       "SCANFINISHED"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\OneClickCure\Registry Cleaner]
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\OneClickCure\System Cleaner]
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\OneclickLastScanDetailsPath]
       "USTSPCO_RC.exe"="REG_DWORD", 2
       "USTSPCOPrivacyProtector.exe"="REG_DWORD", 264
       "USTSPCOSystemCleaner.exe"="REG_DWORD", 464
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\Privacy Protector]
       "LastActionStatus"="REG_SZ", "scan"
       "LastPPCleanDate"="REG_SZ", "Not Performed Yet"
       "LastPPFileClean_Size"="REG_SZ", "0 Bytes"
       "LastPPScanDate"="REG_SZ", "12.05.2017 11:57:30 AM"
       "LastPPScanFileSize"="REG_SZ", "28.66 MB"
       "LastPPTotalFileCleaned"="REG_DWORD", 0
       "LastPPTotalFileFound"="REG_DWORD", 264
       "TotalItemClean_InTrial"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\Privacy Protector\PrivacyApplication]
       "bFBrohis"="REG_DWORD", 1
       "bFcache"="REG_DWORD", 1
       "bFcookies"="REG_DWORD", 0
       "bOcache"="REG_DWORD", 1
       "bOcookies"="REG_DWORD", 1
       "bOhisofvissit"="REG_DWORD", 0
       "bOHistypaddbar"="REG_DWORD", 1
       "googlechrome_Cache"="REG_DWORD", 1
       "googlechrome_Cookies"="REG_DWORD", 1
       "googlechrome_History"="REG_DWORD", 1
       "googlechrome_VisitedLinks"="REG_DWORD", 0
       "ie8_AddBarHistory"="REG_DWORD", 0
       "ie8_Cookies"="REG_DWORD", 1
       "ie8_HistoryVS"="REG_DWORD", 1
       "ie8_TempIntFileFolder"="REG_DWORD", 1
       "wComdiahis"="REG_DWORD", 0
       "wDochis"="REG_DWORD", 0
       "wFlushrecyclebin"="REG_DWORD", 0
       "wMspanrecfillis"="REG_DWORD", 0
       "wRuncmdhis"="REG_DWORD", 1
       "wWorrecfillis"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\Registry Cleaner]
       "RegErrsFixedLast"="REG_DWORD", 0
       "StrLastScanResults"="REG_SZ", "2"
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\ScanStatusForLauncher\PrivProt]
       "ErrorCount"="REG_DWORD", 264
       "iconStatus"="REG_DWORD", 0
       "LastScanDateTime"="REG_SZ", "5/12/2017 11:57:30 AM"
       "MSG"="REG_SZ", "264 items detected
Fri. May 12, 2017. 11:57 AM"
       "MSGOnHome"="REG_SZ", "264 privacy items detected"
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\ScanStatusForLauncher\RegClean]
       "ErrorCount"="REG_DWORD", 2
       "iconStatus"="REG_DWORD", 0
       "LastScanDateTime"="REG_SZ", "5/12/2017 11:59:30 AM"
       "MSG"="REG_SZ", "2 Errors Found
Fri. May 12, 2017. 11:58 AM"
       "MSGOnHome"="REG_SZ", "2 registry Errors found"
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\ScanStatusForLauncher\SysClean]
       "ErrorCount"="REG_DWORD", 464
       "iconStatus"="REG_DWORD", 0
       "LastScanDateTime"="REG_SZ", "5/12/2017 11:57:55 AM"
       "MSG"="REG_SZ", "464 junk items detected
Fri. May 12, 2017. 11:57 AM"
       "MSGOnHome"="REG_SZ", "464 junk items detected"
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\System Cleaner]
       "PF_1"="REG_SZ", "Fri. May 12, 2017. 11:57 AM"
       "PF_2"="REG_SZ", "464"
       "PF_3"="REG_DWORD", 464
       "PF_6"="REG_SZ", "182.26 MB"
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\System Cleaner\Advanced]
       "ChkEmptyFolders"="REG_DWORD", 0
       "ChkExcludeRecentFiles"="REG_DWORD", 1
       "chkSkipPersonalFolders"="REG_DWORD", 1
       "ChkSkipSystemFiles"="REG_DWORD", 1
       "chkSkipSystemFolders"="REG_DWORD", 1
       "ChkZeroLenght"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\System Cleaner\IgnoreList]
       "*pc optimizer*"="REG_SZ", ""
       "*ustechsupport*"="REG_SZ", ""
       "c:\users\{username}\appdata\local\microsoft\windows\burn\burn*"="REG_SZ", ""
       "c:\users\{username}\appdata\roaming\microsoft\windows\network shortcuts*"="REG_SZ", ""
       "c:\users\{username}\appdata\roaming\microsoft\windows\printer shortcuts*"="REG_SZ", ""
       "c:\users\{username}\appdata\roaming\microsoft\windows\sendto*"="REG_SZ", ""
       "c:\users\{username}\favorites*"="REG_SZ", ""
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\System Cleaner\LocationDrives]
       "0"="REG_SZ", "C: (Local Disk)"
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\System Cleaner\LocationFolders]
       "0"="REG_SZ", "C:\Windows\Temp"
       "1"="REG_SZ", "C:\Users\{username}\AppData\Local\Temp"
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\System Cleaner\MaskList]
       "*.---"="REG_DWORD", 1
       "*.$$$"="REG_DWORD", 1
       "*.$db"="REG_DWORD", 1
       "*.?$?"="REG_DWORD", 0
       "*.??$"="REG_DWORD", 1
       "*.??~"="REG_DWORD", 1
       "*.?~?"="REG_DWORD", 0
       "*.^"="REG_DWORD", 0
       "*.___"="REG_DWORD", 1
       "*._dd"="REG_DWORD", 0
       "*._detmp"="REG_DWORD", 0
       "*._mp"="REG_DWORD", 1
       "*.~*"="REG_DWORD", 1
       "*.~mp"="REG_DWORD", 1
       "*.aps"="REG_DWORD", 0
       "*.bak"="REG_DWORD", 0
       "*.chk"="REG_DWORD", 1
       "*.db$"="REG_DWORD", 1
       "*.dmp"="REG_DWORD", 1
       "*.err"="REG_DWORD", 0
       "*.ftg"="REG_DWORD", 0
       "*.fts"="REG_DWORD", 1
       "*.gid"="REG_DWORD", 1
       "*.ilk"="REG_DWORD", 0
       "*.log"="REG_DWORD", 0
       "*.ncb"="REG_DWORD", 0
       "*.nch"="REG_DWORD", 0
       "*.old"="REG_DWORD", 1
       "*.pch"="REG_DWORD", 0
       "*.prv"="REG_DWORD", 0
       "*.sik"="REG_DWORD", 0
       "*.temp"="REG_DWORD", 1
       "*.tmp"="REG_DWORD", 1
       "*.wbk"="REG_DWORD", 0
       "*log.txt"="REG_DWORD", 0
       "~*.*"="REG_DWORD", 1
       "0*.nch"="REG_DWORD", 0
       "chklist.*"="REG_DWORD", 1
       "CHKLIST.MS"="REG_DWORD", 0
       "mscreate.dir"="REG_DWORD", 1
       "thumbs.db"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\USTechSupport\PC Optimizer\System Cleaner\Removal]
       "DirectFastRemove"="REG_DWORD", 0
Malwarebytes log:
 
Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 5/12/17
Scan Time: 12:09 PM
Logfile: mbamMyCleanPC.txt
Administrator: Yes

-Software Information-
Version: 3.0.6.1469
Components Version: 1.0.103
Update Package Version: 1.0.1923
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 330711
Time Elapsed: 1 min, 42 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 6
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\ustpcopt.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCODefragSrv64.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCODiskOptimizer.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOPrivacyProtector.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOSystemCleaner.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCO_RC.exe, Quarantined, [1709], [336562],1.0.1923

Module: 49
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\ustpcopt.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\asohtm.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\asohtm.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\asohtm.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\asohtm.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\asohtm.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\asores.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\asores.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\asores.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\asores.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\asores.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100enu.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100enu.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100enu.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100enu.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100enu.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100u.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100u.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100u.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100u.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100u.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\msvcp100.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\msvcp100.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\msvcp100.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\msvcp100.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\msvcp100.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\msvcr100.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\msvcr100.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\msvcr100.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\msvcr100.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\msvcr100.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\sqlite3.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCODefragSrv64.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCODiskOptimizer.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOHelper.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOHelper.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOHelper.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOHelper.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOHelper.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOPrivacyProtector.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOsys.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOsys.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOsys.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOsys.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOsys.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOSystemCleaner.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCO_RC.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\xmllite.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\xmllite.dll, Quarantined, [1709], [336562],1.0.1923

Registry Key: 76
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1EBF37B1-7B87-43C8-9DB7-11AD9920E948}_is1, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\USTSPCODiskOptimizer, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\TYPELIB\{03837500-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{038374FF-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837502-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837506-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{0383750B-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837510-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837512-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837514-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837516-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{0383751a-098b-11d8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837520-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837524-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837533-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837534-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{0383753A-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{0383753D-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837541-098b-11d8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837543-098b-11d8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837544-098b-11d8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{038374FF-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837502-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837506-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0383750B-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837510-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837512-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837514-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837516-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0383751a-098b-11d8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837520-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837524-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837533-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837534-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0383753A-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0383753D-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837541-098b-11d8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837543-098b-11d8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03837544-098b-11d8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{038374FF-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837502-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837506-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0383750B-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837510-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837512-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837514-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837516-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0383751a-098b-11d8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837520-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837524-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837533-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837534-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0383753A-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0383753D-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837541-098b-11d8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837543-098b-11d8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837544-098b-11d8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{03837500-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{03837500-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\PLA.SYSTEMDATACOLLECTORSETCOLLECTION.1, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\CLSID\{03837547-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\PLA.SystemDataCollectorSetCollection, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837547-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{03837547-098B-11D8-9414-505054503030}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{69869D10-3B1D-E089-CA54-8A93C86DD85D}, Quarantined, [1709], [397953],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{B51F4334-7FD9-43CA-88CB-CF81BF314C14}, Quarantined, [1709], [336575],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{C1182FB3-D4A8-4D35-A7F9-2E08C426CFA6}, Quarantined, [1709], [336579],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{C83AA56C-CBAF-45F3-B6F0-E8BB7E947A01}, Quarantined, [1709], [336570],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\LAUNCH CDPCO, Quarantined, [1709], [336578],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\MyCleanPC PC Optimizer, Quarantined, [1709], [336573],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\, Quarantined, [1709], [380372],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\, Quarantined, [1709], [380372],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\USTSPCO-USTSPCOOneClickCare, Quarantined, [1709], [336568],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\WOW6432NODE\USTechSupport, Quarantined, [1709], [397954],1.0.1923
PUP.Optional.USTechSupport, HKCU\SOFTWARE\USTechSupport, Quarantined, [1709], [397955],1.0.1923

Registry Value: 4
PUP.Optional.USTechSupport, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{B51F4334-7FD9-43CA-88CB-CF81BF314C14}|PATH, Quarantined, [1709], [336575],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{C1182FB3-D4A8-4D35-A7F9-2E08C426CFA6}|PATH, Quarantined, [1709], [336579],1.0.1923
PUP.Optional.USTechSupport, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{C83AA56C-CBAF-45F3-B6F0-E8BB7E947A01}|PATH, Quarantined, [1709], [336570],1.0.1923
PUP.Optional.USTechSupport, HKCU\SOFTWARE\USTECHSUPPORT\PC OPTIMIZER\ONECLICKLASTSCANDETAILSPATH|USTSPCO_RC.EXE, Quarantined, [1709], [380372],1.0.1923

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 15
PUP.Optional.USTechSupport, C:\ProgramData\USTechSupport\PC Optimizer\Disk Optimizer, Quarantined, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\ProgramData\USTechSupport\PC Optimizer, Quarantined, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\ProgramData\USTechSupport\Log, Quarantined, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\PROGRAMDATA\USTechSupport, Quarantined, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\Users\{username}\AppData\Roaming\USTechSupport\PC Optimizer\Checking for Updates\AppUpdates, Quarantined, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\Users\{username}\AppData\Roaming\USTechSupport\PC Optimizer\Checking for Updates, Quarantined, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\Users\{username}\AppData\Roaming\USTechSupport\PC Optimizer\Registry Cleaner, Delete-on-Reboot, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\Users\{username}\AppData\Roaming\USTechSupport\PC Optimizer\Disk Optimizer, Quarantined, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\Users\{username}\AppData\Roaming\USTechSupport\PC Optimizer, Delete-on-Reboot, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\USERS\{username}\APPDATA\ROAMING\USTechSupport, Delete-on-Reboot, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\DefragReport, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\PROGRAM FILES (X86)\USTechSupport, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyCleanPC\PC Optimizer, Quarantined, [1709], [336582],1.0.1923
PUP.Optional.USTechSupport, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\MYCLEANPC, Quarantined, [1709], [336582],1.0.1923

File: 83
PUP.Optional.USTechSupport, C:\ProgramData\USTechSupport\Log\MyCleanPC_CustomerSupport.log, Quarantined, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\ProgramData\USTechSupport\Log\MyCleanPC_Debug.log, Quarantined, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\Users\{username}\AppData\Roaming\USTechSupport\PC Optimizer\Checking for Updates\AppUpdates\LatestVersion.htm, Quarantined, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\Users\{username}\AppData\Roaming\USTechSupport\PC Optimizer\Registry Cleaner\log_05-12-2017.log, Delete-on-Reboot, [1709], [336563],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\DefragReport\footer_left.jpg, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\DefragReport\footer_middle.jpg, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\DefragReport\footer_right.jpg, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\DefragReport\left_border.jpg, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\DefragReport\line3px_Blue.jpg, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\DefragReport\Report_header_leftText.jpg, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\DefragReport\Report_header_left_image.jpg, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\DefragReport\Report_header_top_middle.jpg, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\DefragReport\Report_header_top_right.jpg, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\DefragReport\right_border.jpg, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100ita.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\ustpcopt.exe, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\1.ico, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\2.ico, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\3.ico, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\4.ico, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\5.ico, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\6.ico, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\ASEng.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\AsInvoker.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\aso.ini, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\asohtm.dll, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\asores.dll, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\atl100.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\checkupdate.ini, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\client.ini, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\DiskOpt.ini, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\Downloader.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\FileList.pcp, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\HighestAvailable.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100chs.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100cht.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100deu.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100enu.dll, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100esn.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100fra.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100jpn.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100kor.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100rus.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\mfc100u.dll, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\Microsoft.VC90.ATL.manifest, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\Microsoft.VC90.CRT.manifest, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\Microsoft.VC90.MFC.manifest, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\Microsoft.VC90.MFCLOC.manifest, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\msvcp100.dll, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\msvcr100.dll, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\privprotector.ini, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\regclean.ini, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\RegList.pcp, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\regopt.ini, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\RequireAdministrator.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\sqlite3.dll, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\sysclean.ini, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\sysfilebackres.ini, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\unins000.dat, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\unins000.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\unins000.msg, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\unrar.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOCheckUpdate.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCODefragSrv.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCODefragSrv64.exe, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCODiskOptimizer.exe, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOHelper.dll, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOPrivacyProtector.exe, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOsys.dll, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOSysFileBakRes.exe, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCOSystemCleaner.exe, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\USTSPCO_RC.exe, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\xmllite.dll, Delete-on-Reboot, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\Program Files (x86)\USTechSupport\MCPPCO\zlibwapi.dll, Quarantined, [1709], [336562],1.0.1923
PUP.Optional.USTechSupport, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyCleanPC\PC Optimizer\MyCleanPC PC Optimizer.lnk, Quarantined, [1709], [336582],1.0.1923
PUP.Optional.USTechSupport, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyCleanPC\PC Optimizer\Uninstall MyCleanPC PC Optimizer.lnk, Quarantined, [1709], [336582],1.0.1923
PUP.Optional.USTechSupport, C:\USERS\{username}\DESKTOP\MYCLEANPC.EXE, Quarantined, [1709], [336585],1.0.1923
PUP.Optional.USTechSupport, C:\USERS\PUBLIC\DESKTOP\MYCLEANPC PC OPTIMIZER.LNK, Quarantined, [1709], [336581],1.0.1923
PUP.Optional.USTechSupport, C:\WINDOWS\TASKS\USTSPCO-USTSPCOONECLICKCARE.JOB, Quarantined, [1709], [336567],1.0.1923
PUP.Optional.USTechSupport, C:\WINDOWS\SYSTEM32\TASKS\MyCleanPC PC Optimizer, Quarantined, [1709], [336572],1.0.1923
PUP.Optional.USTechSupport, C:\WINDOWS\SYSTEM32\TASKS\LAUNCH CDPCO, Quarantined, [1709], [336577],1.0.1923
PUP.Optional.USTechSupport, C:\WINDOWS\SYSTEM32\TASKS\USTSPCO-USTSPCOONECLICKCARE, Quarantined, [1709], [336566],1.0.1923
PUP.Optional.USTechSupport, , Removal Failed, [1709], [380372],1.0.1923

Physical Sector: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.

Share this post


Link to post
Share on other sites
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.