Misleading:Win32/PerfectOptimizer is the detection name used by Microsoft security products for a series of programs that the author markets as system optimization tools. Product names include Perfect Optimizer, Optimizer Tool, Registry Corrector, and FixMum. Some versions of these programs may display deceptive or fraudulent claims about files, registry entries and/or other items on the system. These versions are detected by Microsoft security products.
Installation
The following system changes may occur when Program:Win32/PerfectOptimizer is installed, depending on which version is found on the computer:
-
Perfect Optimizer:
-
Creates the following registry subkey:
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A14A8608-CF1C-4010-A348-7EA220C70305}_is1
-
Creates the following folders:
%ProgramFiles%\Perfect Optimizer
%ProgramFiles%\Perfect Optimizer\config
%ProgramFiles%\Perfect Optimizer\Data
%ProgramFiles%\Perfect Optimizer\Data\Service
%ProgramFiles%\Perfect Optimizer\Update
%UserProfile%\Start Menu\Programs\Perfect Optimizer
- Optimizer Tool:
- Creates the following folders:
%ProgramFiles%\Optimizer Tool
%ProgramFiles%\Optimizer Tool\Backup
%ProgramFiles%\Optimizer Tool\Backup\Application
%ProgramFiles%\Optimizer Tool\Backup\Registry
%ProgramFiles%\Optimizer Tool\Backup\Registry\FirstBackup
%ProgramFiles%\Optimizer Tool\Backup\Registry\FullBackup
%ProgramFiles%\Optimizer Tool\Backup\Service
%ProgramFiles%\Optimizer Tool\config
%ProgramFiles%\Optimizer Tool\Data
%ProgramFiles%\Optimizer Tool\Data\Service
%ProgramFiles%\Optimizer Tool\Temp
%ProgramFiles%\Optimizer Tool\Update
%UserProfile%\Start Menu\Programs\Optimizer Tool
%ProgramFiles%\Optimizer Tool\ActiveX.dat
%ProgramFiles%\Optimizer Tool\ActiveXSecurity.dll
%ProgramFiles%\Optimizer Tool\Apps.dat
%ProgramFiles%\Optimizer Tool\Components.dat
%ProgramFiles%\Optimizer Tool\Config.db
%ProgramFiles%\Optimizer Tool\config\about.bmp
%ProgramFiles%\Optimizer Tool\config\head.bmp
%ProgramFiles%\Optimizer Tool\config\Lng2Const.xml
%ProgramFiles%\Optimizer Tool\config\logo.ico
%ProgramFiles%\Optimizer Tool\config\Menu.xml
%ProgramFiles%\Optimizer Tool\config\OptimizerTool.chm
%ProgramFiles%\Optimizer Tool\config\register.jpg
%ProgramFiles%\Optimizer Tool\config\SmallLogo.bmp
%ProgramFiles%\Optimizer Tool\config\splash.jpg
%ProgramFiles%\Optimizer Tool\config\website.url
%ProgramFiles%\Optimizer Tool\Data\Service\campus_model.bat
%ProgramFiles%\Optimizer Tool\Data\Service\default_model.bat
%ProgramFiles%\Optimizer Tool\Data\Service\home_model.bat
%ProgramFiles%\Optimizer Tool\Data\Service\interner_model.bat
%ProgramFiles%\Optimizer Tool\Data\Service\notebook_model.bat
%ProgramFiles%\Optimizer Tool\Data\Service\office_model.bat
%ProgramFiles%\Optimizer Tool\DriverBackup.dll
%ProgramFiles%\Optimizer Tool\FileShred.dll
%ProgramFiles%\Optimizer Tool\FreeUse.dll
%ProgramFiles%\Optimizer Tool\InstallDll.dll
%ProgramFiles%\Optimizer Tool\JunkFileClean.dll
%ProgramFiles%\Optimizer Tool\License.dll
%ProgramFiles%\Optimizer Tool\MiracleLib.dll
%ProgramFiles%\Optimizer Tool\OptimizerTool.exe
%ProgramFiles%\Optimizer Tool\PerfectOptimizer.ini
%ProgramFiles%\Optimizer Tool\SEClean.DLL
%ProgramFiles%\Optimizer Tool\SERes.DLL
%ProgramFiles%\Optimizer Tool\sqlite3.dll
%ProgramFiles%\Optimizer Tool\SystemBackup.dll
%ProgramFiles%\Optimizer Tool\unins000.dat
%ProgramFiles%\Optimizer Tool\unins000.exe
%ProgramFiles%\Optimizer Tool\Update.exe
%ProgramFiles%\Optimizer Tool\website.url
%ProgramFiles%\Optimizer Tool\WinUpdate.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Optimizer Tool.lnk
%UserProfile%\Desktop\Optimizer Tool.lnk
%UserProfile%\Start Menu\Programs\Optimizer Tool\Optimizer Tool.lnk
%UserProfile%\Start Menu\Programs\Optimizer Tool\Uninstall.lnk
%UserProfile%\Start Menu\Programs\Optimizer Tool\Website.lnk
%WinDir%\Tasks\OptimizerTool_Home.Job
HKLM\SOFTWARE\CLASSES\CLSID\{0C290501-32F6-4563-8976-953C2322FF59}
HKLM\SOFTWARE\CLASSES\CLSID\{16927A58-1148-4985-8666-B8B2B2417E1C}
HKLM\SOFTWARE\CLASSES\CLSID\{4FDAA60D-9DCF-4B05-B22D-5B240762C7AC}
HKLM\SOFTWARE\CLASSES\CLSID\{54D3822A-CE66-4338-834E-4F0868BE2CAA}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000266-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000400-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000500-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000501-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000503-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000504-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000505-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000506-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000508-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{0000050C-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{0000050D-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{0000050E-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000512-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000513-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000515-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000534-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{0000054C-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{0000054D-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{0000054E-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{0000054F-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000550-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000555-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000556-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000562-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000564-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000565-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{00000569-0000-0010-8000-00AA006D2EA4}
HKLM\SOFTWARE\CLASSES\INTERFACE\{6D055842-2750-4EB9-9549-050ED4E6E122}
HKLM\SOFTWARE\CLASSES\INTERFACE\{A47F99EB-38AE-45B4-B206-6E897B18CFC3}
HKLM\SOFTWARE\CLASSES\INTERFACE\{AAC8EF57-370E-48F0-A3D9-7CF227F9742F}
HKLM\SOFTWARE\CLASSES\INTERFACE\{B08400BD-F9D1-4D02-B856-71D5DBA123E9}
HKLM\SOFTWARE\CLASSES\INTERFACE\{BB6E88A6-D821-441D-8FDE-B576B3AFCED5}
HKLM\SOFTWARE\CLASSES\TYPELIB\{373D6A60-A03B-4B99-8BD0-5A7B6AFE3427}
HKLM\SOFTWARE\CLASSES\TYPELIB\{373D6A60-A03B-4B99-8BD0-5A7B6AFE3427}\1.0
HKLM\SOFTWARE\CLASSES\TYPELIB\{EF53050B-882E-4776-B643-EDA472E8E3F2}
HKLM\SOFTWARE\CLASSES\TYPELIB\{EF53050B-882E-4776-B643-EDA472E8E3F2}\2.7
%ProgramFiles%\Registry Corrector\images
%ProgramFiles%\Registry Corrector\panelHTML
%ProgramFiles%\Registry Corrector\panelHTML\images
%WinDir%\system32\RegistryCorrector
%WinDir%\system32\RegistryCorrector\Backup
%WinDir%\system32\RegistryCorrector\Backup\Favourite
%WinDir%\system32\RegistryCorrector\Backup\Registry
%ProgramFiles%\Registry Corrector\applications.ldb
%ProgramFiles%\Registry Corrector\applications.mdb
%ProgramFiles%\Registry Corrector\FileAssociation.ini
%ProgramFiles%\Registry Corrector\IEComponentRepair.ini
%ProgramFiles%\Registry Corrector\IERestoreDefualt.ini
%ProgramFiles%\Registry Corrector\images\1.ico
%ProgramFiles%\Registry Corrector\images\2.ico
%ProgramFiles%\Registry Corrector\images\3.ico
%ProgramFiles%\Registry Corrector\images\4.ico
%ProgramFiles%\Registry Corrector\images\5.ico
%ProgramFiles%\Registry Corrector\images\Thumbs.db
%ProgramFiles%\Registry Corrector\junks.txt
%ProgramFiles%\Registry Corrector\MemWarp.dll
%ProgramFiles%\Registry Corrector\msado27.tlb
%ProgramFiles%\Registry Corrector\MSVBVM60.dll
%ProgramFiles%\Registry Corrector\panelHTML\images\backup.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backup_drivers.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backup_drivers_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backup_favourite.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backup_favourite_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backup_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backup_registry.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backup_registry_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backupandrestore.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backupandrestoreon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backupcompleteregistryoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backupcompleteregistryon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backupfavouritesoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\backupfavouriteson.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\cleansweepoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\cleansweepon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\complete_status.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\complete_status_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\completestatus.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\completestatuson.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\evidence_cleaner.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\evidence_cleaner_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\file_shredder.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\file_shredder_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\fileshredderoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\fileshredderon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\fixandrepairoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\fixandrepairon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\homeoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\homeon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\internet_explorer_corrector.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\internet_explorer_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\junk_cleaner.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\junk_cleaner_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\junkscrubberoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\junkscrubberon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\line.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\manage.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\manage_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\memory_optimizer.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\memory_optimizer_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\memoryoptimizeroff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\memoryoptimizeron.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\one_click_scan.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\one_click_scan_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\one_click_scan-hover.JPG
%ProgramFiles%\Registry Corrector\panelHTML\images\one_click-scan.JPG
%ProgramFiles%\Registry Corrector\panelHTML\images\optimize.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\optimize_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\optimizeroff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\optimizeron.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\pc_optimizer.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\pc_optimizer_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\pcdriverbackupsoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\pcdriverbackupson.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\pcoptimizeroff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\pcoptimizeron.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\privacyguardoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\privacyguardon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\project_icon.ico
%ProgramFiles%\Registry Corrector\panelHTML\images\registry_cleaner.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\registry_cleaner_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\registryscrubberoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\registryscrubberon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\repairinternetexploreroff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\repairinternetexploreron.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\repairsystemoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\repairsystemon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\repairwindowsoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\repairwindowson.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\repar_fix.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\repar_fix_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\scan.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\scan_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\settingsoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\settingson.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\singlepushoptimizeroff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\singlepushoptimizeron.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\startup_wizard.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\startup_wizard_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\startuprepairoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\startuprepairon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\subtabbotimg.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\system_corretor.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\system_corretor_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\system_restore.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\system_restore_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\systemrestoreoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\systemrestoreon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\Thumbs.db
%ProgramFiles%\Registry Corrector\panelHTML\images\uninstall_wizard.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\uninstall_wizard_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\uninstallwizardoff.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\uninstallwizardon.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\windows_corrector.jpg
%ProgramFiles%\Registry Corrector\panelHTML\images\windows_corrector_hover.jpg
%ProgramFiles%\Registry Corrector\panelHTML\indexleft.html
%ProgramFiles%\Registry Corrector\RegistryCorrector.exe
%ProgramFiles%\Registry Corrector\RegistryCorrectorSupport.exe
%ProgramFiles%\Registry Corrector\SQLite3VB.dll
%ProgramFiles%\Registry Corrector\tskschd.dll
%ProgramFiles%\Registry Corrector\uninstal.log
%UserProfile%\Desktop\Registry Corrector.lnk
-
FixMum:
- Creates the following registry subkey:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F2FADB6E-10AE-44B9-BFD2-6AE7D072A631}_is1
- Creates the following folders:
%ProgramFiles%\FixMum
%ProgramFiles%\FixMum\Backup
%ProgramFiles%\FixMum\Backup\Application
%ProgramFiles%\FixMum\Backup\Registry
%ProgramFiles%\FixMum\Backup\Registry\FirstBackup
%ProgramFiles%\FixMum\Backup\Registry\FullBackup
%ProgramFiles%\FixMum\Backup\Service
%ProgramFiles%\FixMum\config
%ProgramFiles%\FixMum\Data
%ProgramFiles%\FixMum\Data\Service
%ProgramFiles%\FixMum\Temp
%ProgramFiles%\FixMum\Update
%UserProfile%\Start Menu\programs\FixMum
- Creates the following files:
%ProgramFiles%\FixMum\aamd532.dll
%ProgramFiles%\FixMum\ActiveX.dat
%ProgramFiles%\FixMum\Apps.dat
%ProgramFiles%\FixMum\Components.dat
%ProgramFiles%\FixMum\Config.db
%ProgramFiles%\FixMum\config\about.bmp
%ProgramFiles%\FixMum\config\head.bmp
%ProgramFiles%\FixMum\config\Left.jpg
%ProgramFiles%\FixMum\config\Lng2Const.xml
%ProgramFiles%\FixMum\config\logo.ico
%ProgramFiles%\FixMum\config\Logo64.ico
%ProgramFiles%\FixMum\config\Menu.xml
%ProgramFiles%\FixMum\config\PerfectOptimzer.chm
%ProgramFiles%\FixMum\config\register.jpg
%ProgramFiles%\FixMum\config\SmallLogo.bmp
%ProgramFiles%\FixMum\config\splash.jpg
%ProgramFiles%\FixMum\config\website.url
%ProgramFiles%\FixMum\Data\Service\campus_model.bat
%ProgramFiles%\FixMum\Data\Service\default_model.bat
%ProgramFiles%\FixMum\Data\Service\home_model.bat
%ProgramFiles%\FixMum\Data\Service\interner_model.bat
%ProgramFiles%\FixMum\Data\Service\notebook_model.bat
%ProgramFiles%\FixMum\Data\Service\office_model.bat
%ProgramFiles%\FixMum\FixMum.exe
%ProgramFiles%\FixMum\FreeUse.dll
%ProgramFiles%\FixMum\InstallDll.dll
%ProgramFiles%\FixMum\License.dll
%ProgramFiles%\FixMum\MiracleLib.dll
%ProgramFiles%\FixMum\PerfectOptimizer.ini
%ProgramFiles%\FixMum\SEClean.DLL
%ProgramFiles%\FixMum\SERes.DLL
%ProgramFiles%\FixMum\sqlite3.dll
%ProgramFiles%\FixMum\unins000.dat
%ProgramFiles%\FixMum\unins000.exe
%ProgramFiles%\FixMum\Update.exe
%ProgramFiles%\FixMum\website.url
%ProgramFiles%\FixMum\WinUpdate.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\FixMum.lnk
%UserProfile%\Desktop\FixMum.lnk
%UserProfile%\Start Menu\programs\FixMum\FixMum.lnk
%UserProfile%\Start Menu\programs\FixMum\Uninstall.lnk
%UserProfile%\Start Menu\programs\FixMum\Website.lnk
%WinDir%\Tasks\FixMum_Home.Job
The shortcut link may look like one of the following:
Additional information
Misleading:Win32/PerfectOptimizer may display alert messages, such as the following:
Analysis by Francis Allan Tan Seng and Aaron Hulett
