ProtectPcs Description

 

 

[+] Click Image to Enlarge

 

 

CartCartCartCart

ProtectPcs is a rogue security application from the family of rogues such as TheDefend and SysDefence. ProtectPcs is distributed by Trojans that enter users’ systems via vulnerability exploits or malicious downloads. The Trojan sets ProtectPcs to automatically run each time a user restarts his/her Windows system. The Trojan will also create numerous harmless files in different locations, which are later detected as malware when ProtectPcs conducts a fake system scan. ProtectPcs will also display pop-up adverts and fake virus alert notifications in order to convince victims that their computers are seriously infected. Users are advised to ignore all scan reports and notifications displayed by ProtectPcs and by no means purchase the “full version” of ProtectPcs.

Type: Rogue AntiSpyware Programs

How Can You Detect ProtectPcs?

ProtectPcs Technical Report

As new ProtectPcs details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following ProtectPcs files with its MD5s were created in the system:

ProtectPcs has typically the following processes in memory:

• ProtectPcs.exe

ProtectPcs created the following directories, files, paths:

• %ProgramFiles%\ProtectPcs Software\ProtectPcs
• %AllUsersProfile%\Start Menu\Programs\ProtectPcs

Important Article Disclaimer