OpenCloud Security is a rogue of the FakeScanti Family, that uses fake alert scare tactics and fake scan results showing the computer is infected tactics along with the blocking of other applications when trying to run themtogoad the user into purchasing the rogue to clean the fake scan results it shows.
Files and Locations:
%APPDATA%\OpenCloud OpenCloud Security\csrss.exe
%STARTMENU%\csrss.exe
About locations:
%APPDATA% and are token’s that refer to specific Windows directories for the different Operating Systems being used.
%APPDATA%
XP:
< drive>:\Documents and Settings\<user>\Local Settings\Application Data
Vista and Windows 7:
< drive>:\Users\<User>\AppData\Local
%STARTMENU%
XP:
< drive>:\Documents and Settings\<User>\Start Menu
Vista/Windows 7:
< drive:>:\Users\<User>\APPDATA\ROAMING\Microsoft\Windows\Start Menu
Current two sites associated with the rogue:
freshmediacontent.com
paybycardonline.com
This rogue can be removed using manually methods, however, the OpenCloud Security rogue is difficult as it will try and re-infect the PC, and requires re-starting into safe mode, so it is recommend to use our Antispyware/Antivirus removal tool, VIPRE Antivirus. You can download a free trial to remove the rogue from your computer for no cost by clicking on the link below:
http://www.vipreantivirus.com/Antivirus-Trial/VIPRE-Antivirus/
If you are unable to download and install our malware removal tool because this has infected your computer and is not allowing you to install the program, you can use our VIPRE Rescue Disc here:
