CurePCSolution

CurePCSolution is a rogue Antispyware solution from Cure PC Lab; it shows false warnings and misleading scan results, then false positive work as goad to purchase the product.0

General information:

Malware Name: CurePCSolution
Malware Type: Rogue Security Program
Company Name: Cure PC Lab
Company URL: http://curepcsolutions.com/
Threat Level: Medium Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

CurePcSolutions Anti-Spyware 2.0 is an antispyware Solution from Cure PC Lab. It is an efficient solution against the new generation of threats spreading over the internet.

Spyware Description:

CurePCSolution is a rogue Antispyware solution from Cure PC Lab; it shows false warnings and misleading scan results, then false positive work as goad to purchase the product.0

Characteristics/Symptoms:

    -> It shows false Warning messages. -> It also shows misleading scan Results. -> It also uses aggressive advertising.0

Additional information might be found here:

google Search at Google for CurePCSolution
bing Search at Bing for CurePCSolution
yahoo Search at Yahoo for CurePCSolution

Processes Running:

CurePCSolution.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\CurePCSolution\ExcludeParams.txt unknown Text Document
C:\WINDOWS\Installer\{2687B107-2B13-410A-A850-BE211B74AF12}\SystemFolder_msiexec.exe 10134 Application
C:\WINDOWS\Installer\{2687B107-2B13-410A-A850-BE211B74AF12}\controlPanelIcon.exe 4286 Application

Folder information Created after Installation:

Folder Location
C:\Program Files\CurePCSolution
C:\Program Files\CurePCSolution\data

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CLASSES_ROOT \Installer\Features\701B786231B2A0148A05EB12B147FA21 MainFeature0
HKEY_CLASSES_ROOT \Installer\Features\701B786231B2A0148A05EB12B147FA21 [NULL]0
HKEY_CLASSES_ROOT \Installer\Products\701B786231B2A0148A05EB12B147FA21 [NULL]0