OpenCloud Security
Written by Tomas Meskauskas on
OpenCloud Security uninstall guide
OpenCloud Security is another fake antivirus program that is similar to Wolfram Antivirus, OpenCloud Antivirus and other. As the previous versions, this bogus program pretends to run computer security scans and then displays fake results. You shouldn't be impressed by the professional looks of opencloud security - it's a totally useless program. This bogus scanner is created by Internet criminals to steal money from your credit card account. All that this fake software does is scares you into thinking that your computer is highly infected with malware and then forces you to pay for it's non existent full version. You will notice that when you click "Remove Threats" button in the main window of opencloud security, you will be taken to a website where you will be asked to enter you banking information and purchase a full version for this fake scanner. Needless to say that you shouldn't buy opencloud security, this program only imitated the process of the security scan and then displays fake scan results. Opencloud security is spread through rogue websites which exploits various security vulnerabilities to install such fake computer security scanners to your computer. All of the features that opencloud security offers to protect your PC are fake, the creators of this bogus program are hoping that you will fall for their scam and purchase a non existent full version of opencloud security. You should remove this fake computer security scanner from your PC as soon as you notice it.
Here is an example of fake alerts, that Opencloud Security generates:
"Warning! The file "taskmgr.exe" is infected. Running of application is impossible. Please activate your antivirus software"
"Windows Security Alert To help protect your computer, Windows Firewall has blocked some features of this program. Do you want to keep blocking this program? Name: Zeus Trojan Publisher: Unauthorized"
"Warning! Infection found Unwanted software (malware) or tracking cookies have been found during last scan. It is highly recommended to remove it from your computer. Keylogger Zeus was detected and put in quarantine. Keylogger Zeus is a very dangerous software used by criminals to steal personal data such as credit card information, access to banking accounts, passwords to social networks and e-mails"
"Security Warning Malicious programs that may steal your private information and prevent your system from working properly are detected on your computer. Click here to clean your PC immediately"
"Warning: Infection is Detected Windows has found spyware infection on your computer! Click here to update your Windows antivirus software"
"Windows Security Center Serious security vulnerabilities were detected on this computer. Your privacy and personal data may be unsafe. Do you want to protect your PC?"
Ignore this fake message. Remove Opencloud Security from your computer.
Opencloud Security removal:
Before downloading, enter Opencloud Security activation key in the registration window. Click "Enter Activation key" button and paste this key:
DB038748-B4659586-4A1071AF-32E768CD-36005B1B-F4520642-3000BF2A-04FC910B
When the registration key is entered, OpenCloud Security will think, that you've purchased it and will stop generating fake warnings. It will also enable some disabled windows features. Note, that registering this program will not remove it from your PC. It will just disable fake warnings and you should now be able to download and install spyware remover.
remover for Opencloud Security
If you can't download or run spyware remover try running registry fix (link below). It enables execution of programs. download registryfix.reg file, double click it, click YES and then OK.
If installation fails, you can try downloading customized installer which was built by our technicians to bypass Data Recovery spyware infection. Your browser may report that this file is unsafe. Please ignore these warnings. Download customized installer
Opencloud Security removal instructions (on infected computer):
1. Start your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

2. Open Internet explorer, click Tools and select Internet Options. Select "Connections".


3.Click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.


4. Download HijackThis and save it on your desktop. Some malicious programs are able to block HijackThis so when you click the download link, in the Save dialog rename HijackThis.exe to iexplorer.exe and only then click the Save button. After saving the file on your desktop, double click it. In the main HijackThis window click “Do a system scan only” button. Select these entries (place a tick at the left of the entry):
%AppData%\OpenCloud Security
%StartMenu%\Programs\OpenCloud Security
%AppData%\OpenCloud Security\OpenCloud Security.exe
%AppData%\OpenCloud Security\OpenCloud Security.ico
%AppData%\OpenCloud Security\sysl32.dll
%AppData%\OpenCloud Security\wf.conf
%UserProfile%\Desktop\OpenCloud Security.lnk
%StartMenu%\Programs\OpenCloud Security\OpenCloud Security.lnk
After selecting required entries, click "Fix Checked". After this procedure you can close HijackThis and proceed to the next removal step.
5. Download a legitimate anti-spyware software to fully remove Opencloud Security from your computer.
remover for Opencloud Security
Other tools known to remove Opencloud Security:
Additional information:
Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.
If you can't access Internet:
Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.
Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.
Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.
After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program. Then run a full system scan.
If you are unable to remove Opencloud Security, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)
End these OpenCloud Security processes:
random.exe
csrss.exe
Remove these OpenCloud Security entries:
HKEY_CLASSES_ROOT\CLSID\{19090308-636D-4e9b-A1CE-A647B6F794BF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{19090308-636D-4e9b-A1CE-A647B6F794BF}
Delete these OpenCloud Security files:
%AppData%\OpenCloud Security\
%AppData%\OpenCloud Security\OpenCloud Security.exe
%AppData%\OpenCloud Security\OpenCloud Security.ico
%AppData%\OpenCloud Security\wf.conf
%StartMenu%\Programs\OpenCloud Security\
%StartMenu%\Programs\OpenCloud Security\OpenCloud Security.lnk
%UserProfile%\Desktop\OpenCloud Security.lnk
General tips on removing OpenCloud Security:
*If you can't download anti-spyware software: Click on the download link, when the save dialog opens change the file name (example: when downloading mbam-setup.exe rename it to iexplore.exe).
*If you have installed anti-spyware program but you can't run it: Click Run, type %ProgramFiles% and press Enter. Open folder of your anti-spyware program, search for executable file and rename it. (example: Open Malwarebytes’ Anti-Malware folder, right-click on the main executable file (mbam.exe) then click rename. Rename the mbam.exe file to iexplore.exe, winlogon.exe firefox.exe ...
*If you can't access your anti-spyware software, try creating a new user account:
Click Start -> Settings -> Control panel.
Click User Accounts and create a new account.
Reboot your computer and login using a newly created user account.
*After this procedure you should be able to access your anti-spyware programs. Update and run a full system scan.


Comments