Apcprotect Description

 

 

[+] Click Image to Enlarge

 

 

CartCartCartCart

Apcprotect aka APCprotect is a deceitful anti-spyware application created to swindle victims out of their money. Apcprotect is distributed by Trojans that enter users’ systems via browser vulnerabilities or drive-by downloads. Apcprotect belongs to the same rogue family as TheDefend, IGuardPc and AntiTroy.

Once Apcprotect has penetrated a ststem, it displays numerous security alerts, pop-ups and false system scans in order to convince users that their computers are infected with dangerous malware. As a convenient remedy, Apcprotect recommends the user to purchase its “full version” in order to remove all the falsely detected malware. Do not waste your money on this useless application. Apcprotect should be immediately removed with a legitimate security tool.

Type: Rogue AntiSpyware Programs

How Can You Detect Apcprotect?

Apcprotect Technical Report

As new Apcprotect details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Apcprotect files with its MD5s were created in the system:

Apcprotect has typically the following processes in memory:

• APCProtect.exe
• %ProgramFiles%\APCprotect Software\APCprotect\APCprotect.exe
• %ProgramFiles%\APCprotect Software\APCprotect\uninstall.exe

Apcprotect created the following directories, files, paths:

• %ProgramFiles%\APCProtect Software\APCProtect
• %AllUsersProfile%\Start Menu\Programs\APCProtect

Apcprotect creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “APCprotect.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\APCprotect
• HKEY_LOCAL_MACHINE\SOFTWARE\APCprotect
• APCProtect

Important Article Disclaimer