Cloud AV 2012 Removal Guide

Threat Level:
9/10
Rate this Article:
Comments (0)
Article Views: 652

Rogue.WinAVPro is a notorious group of rogues that encompasses quite a few rogue antispyware applications and Cloud AV 2012 is the newest spawn in the nest. Whatever you do, you should stay as far from this rogue as possible, because it can destroy your computer at the same time stealing your money. Perhaps you might find it hard to believe that a computer program is able to tap into your financial funds, but nothing is impossible when it comes to Cloud AV 2012.

There are many ways for this program to enter your computer. It might come via a spam email message or it can be dropped by a Trojan infection that is already there in your system. It shows that you should perform regular system scan to check for any malicious threats, because Cloud AV 2012 is usually related to a whole bunch of computer parasites. Either way, once Cloud AV 2012 is there, it installs itself without your knowledge and then bombards you with tons of fake security notifications. Such as, for example:

Security Warning
Your computer continues to be infected with harmful viruses. In order to prevent permanent loss of your information and credit card data theft please activate your antivirus software. Click here to enable protection.

Security Warning
Malicious programs that may steal your private information and prevent your system from working properly are detected on your computer.
Click here to clean your PC immediately.

Security Warning
There are critical system files on your computer that were modified by malicious software.
It may cause permanent data loss.
Click here to remove malicious software.

These are just a few of the messages that can be delivered by Cloud AV 2012. However, every single message received from the rogue is completely worthless. These messages are flooding your screen, because Cloud AV 2012 wants to push you into purchasing the full version of the program. If you don’t do that, it can go as far as blocking certain executables files, and forcefully redirecting you to the rogue-related websites.

Even so, you have to stay strong and ignore Cloud AV 2012. Instead of buying the license and exposing your credit card information to a third party (which is exactly what these criminals want), try using these activation codes to “register” Cloud AV 2012:

1354156739
1196121858
1225242171

With Cloud AV 2012 “activated” it will be a lot easier to deal with this rogue first-hand. Remove Cloud AV 2012 with a powerful security tool if you cannot do that manually, and then be sure to scan your computer for any other possible threats.

Tested Cloud AV 2012 removal solution for 64/32-bit Windows 7/Vista/XP/2000
*The Spyhunter scanner download on this site is intended to be used as a detection tool. If you want to use its a removal function, you will need to purchase the full version of SpyHunter.

Cloud AV 2012 Screenshots:

Cloud AV 2012

Cloud AV 2012 technical info for manual removal:

Files Modified/Created on the system:

# File Name File Size (Bytes) File Hash
1%ProgramFiles%\LP\[random]\2.tmp
2%AppData%\dwme.exe
3%AppData%\ldr.ini
4%ProgramFiles5\LP\[random]\[random].exe
5%AppData%\[random]\Cloud AV 2012.ico
6%TempDir%\1.tmp
7Cloud AV 2012.lnk
8%TEMP%
9%AppData%\[random]\[random].exe
10%UserProfile%\Start Menu\Programs\Cloud AV 2012
11%USERPROFILE%\Start Menu\Programs\Startup
1266C.exe286208 bytesMD5: 535b08b0737a0524b133be6401338383
13%AppData%
14Cloud AV 2012v121.exe2801664 bytesMD5: 420b6e9c65701b4b6720f25762f6186d
15%ProgramFiles%\LP\[random]\4.tmp
16502F9.exe172544 bytesMD5: a206e763d2bbed0eee677180c0ebe359
17%SystemDir%\Cloud AV 2012v121.exe
18%TempDir%\dwme.exe
19%Programs%\Cloud AV 2012\Cloud AV 2012.lnk
20%ProgramFiles%\LP\[random]\3.tmp
21%Desktop%\Cloud AV 2012.lnk
22%ProgramFiles%\[random]\[random].exe
23lvvm.exe188416 bytesMD5: 430ab1341e367ee43e2c57e9accd7be2
24%AppData%\[random]\[random].CE0

Files in the following directories were modified:

  • %ProgramFiles%\LP\[random]
  • %AppData%
  • %ProgramFiles5\LP\[random]
  • %AppData%\[random]
  • %TempDir%
  • %UserProfile%\Start Menu\Programs
  • %USERPROFILE%\Start Menu\Programs
  • %SystemDir%
  • %Programs%\Cloud AV 2012
  • %Desktop%
  • %ProgramFiles%\[random]

Memory Processes Created:

# Process Name Process Filename Main module size
1dwme.exedwme.exe
2[random].exe[random].exe
3[random].exe%AppData%\[random]\[random].exe
466C.exe66C.exe286208 bytes
5Cloud AV 2012v121.exeCloud AV 2012v121.exe2801664 bytes
6502F9.exe502F9.exe172544 bytes
7Cloud AV 2012v121.exe%SystemDir%\Cloud AV 2012v121.exe
8dwme.exe%TempDir%\dwme.exe
9[random].exe%ProgramFiles%\[random]\[random].exe
10lvvm.exelvvm.exe188416 bytes

Registry Modifications:

The following Registry Keys were created:

  • HKLM\software\microsoft\Windows\CurrentVersion\Run “[random]“
  • Cloud AV 2012

Reply

Your email address will not be published.

Name
Website
Comment

Enter the numbers in the box to the right *