PC Protection Center 2008 Description

 

 

[+] Click Image to Enlarge

 

 

Cart

PC Protection Center 2008 or PCProtectionCenter 2008, is a rogue anti-spyware program and family of Power Antivirus 2009, XP Antivirus and Antivirus2009. PC Protection Center 2008 may install in the user’s computer system through a Trojan Zlob found on a fake video codec download. Once Zlob is installed, it will issue fake popups and alert messages informing the user about imaginary spyware infections.

PC Protection Center 2008 trial version may also launch its fake system scanner and emulate a computer scan. After the scan is completed, PC Protection Center 2008 trial version is able to generate a list of fake infections as a result. These mechanisms are used by PC Protection Center 2008’s creators to trick the user into downloading PC Protection Center 2008’s full version. PC Protection Center 2008’s messages and scan results will try to push the user into clicking on their links. Once the user click on any of the links provided, he/she will be redirected to PC Protection Center 2008’s website or other malicious websites to purchase rogue PC Protection Center 2008’s full version.

Type: Rogue AntiSpyware Programs

Automatic Detection of PC Protection Center 2008

PC Protection Center 2008 Technical Report

As new PC Protection Center 2008 details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following PC Protection Center 2008 files with its MD5s were created in the system:

PC Protection Center 2008 has typically the following processes in memory:

• c:\WINDOWS\system32\vbzlib2.dll
• pcprotectioncenter_setup[1].exe
• c:\Program Files\PC Protection Center 2008\uninstall.exe
• vbzlib2.dll
• c:\Program Files\PC Protection Center 2008\PcProtection.exe
• PcProtection.exe
• getsn32.dll

PC Protection Center 2008 created the following directories, files, paths:

• %ProgramFiles%\PC Protection Center 2008
• %AllUsersProfile%\Start Menu\Programs\PC Protection Center 2008

PC Protection Center 2008 creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC Protection Center 2008
• 2D9F1530-0B38-4DCB-A90A-CECD559F3514
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “PC Protection Center”
• A55CA42C-BF8A-4491-9073-6E32FC4E6250
• HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus Software
• 85332D96-8051-4509-A581-399FDDBE3AA4

Important Article Disclaimer