PcsProtector is new malicious application that has the same origin GreatDefender, APCprotect, ProtectPcs, SysDefence, TheDefend malwares have. It sneaks into users’ machine through different misleading Internet pages using Trojan horse as invasion tool. Once inside, PcsProtector will start system scan. Such scans will state about tons of infections being stored down on your computer. Without doubts, such alerts must be ignored as they are trustless. Moreover, PcsProtector will not allow you to remove those infections without purchased license which you can find if to follow the link this rogue antivirus application gives you after each scan. PcsProtector is modified the way it is going to stop Windows security services such as: Security Center, Automatic Updates and Windows Firewall Connection Sharing. Also, PcsProtector will control your network and deny access to those web sites that can detect and remove this badware. It will claim that these pages contain infections that are extremely dangerous for the security of the whole PC. Interesting fact about PcsProtector is that you are going to face numerous nag screens and bogus security notifications that will state about new scan need or about the attempting of invasion into your computer. Such pop-ups will appear so many times they would interrupt your every work with computer. All in all, PcsProtector is definitely not the security tool you actually need and it should be removed immediately right after detection.
Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical
Screenshot:
How to remove PcsProtector manually:
It's possible to remove PcsProtector manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.
The files to be deleted:
%Program Files%\PcsProtector Software
%Program Files%\PcsProtector Software\PcsProtector
%Program Files%\PcsProtector Software\PcsProtector\main_config.xml
%Program Files%\PcsProtector Software\PcsProtector\PcsProtector.exe
%Program Files%\PcsProtector Software\PcsProtector\uninstall.exe
%WINDOWS%\10566viruz2809.dll
%WINDOWS%\10652not-a-virus69z.cpl
%WINDOWS%\1092sp5wzre1923.bin
%WINDOWS%\System32\10501not-a-vizus359.dll
%WINDOWS%\System32\105259orz1d2.dll
%WINDOWS%\System32\1058ztroj95e.cpl
%WINDOWS%\System32\.exe
%Documents and Settings%\All Users\Desktop\PcsProtector.lnk
%Documents and Settings%\All Users\Start Menu\Programs\PcsProtector
%Documents and Settings%\All Users\Start Menu\Programs\PcsProtector\1 PcsProtector.lnk
%Documents and Settings%\All Users\Start Menu\Programs\PcsProtector\2 Homepage.lnk
%Documents and Settings%\All Users\Start Menu\Programs\PcsProtector\3 Uninstall.lnk
Remove registry entries:
HKEY_CURRENT_USER\Software\PcsProtector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PcsProtector
HKEY_LOCAL_MACHINE\SOFTWARE\PcsProtector
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “PcsProtector”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PcsProtector
HKEY_LOCAL_MACHINE\SOFTWARE\PcsProtector
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “PcsProtector”
Please be careful because manual removal of PcsProtector may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.
No comments:
Post a Comment