HT Logs. Tips, FAQs, Analyze.

CUA[random].exe is a harmful program.

It is a component of malware or spyware, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

Name: CleanUp Antivirus
Filename: CUA[random].exe
Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | CleanUp Antivirus

Command: C:\Documents and Settings\All Users\Application Data\9be96\CU515.exe
Startup Type: HKCU->Run
HijackThis Category: O4
HijackThis Line:

O4 – HKCU\..\Run: [CleanUp Antivirus] “C:\Documents and Settings\All Users\Application Data\9be96\CU515.exe” /s /d

DDS Line:

uRun: [CleanUp Antivirus] C:\Documents and Settings\All Users\Application Data\9be96\CU515.exe

Combofix/RSIT Line:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
“CleanUp Antivirus”=C:\Documents and Settings\All Users\Application Data\9be96\CU515.exe

Description: core component of CleanUp Antivirus. CleanUp Antivirus is a fake antivirus program, that also known as rogue antispyware.

How to remove: use these CleanUp Antivirus removal instructions.

This entry was posted on Wednesday, March 10th, 2010 at 9:05 am and is filed under O4, Rogue Antispyware/Antivirus, Run. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.