WinPCDoctor Description

 

 

[+] Click Image to Enlarge

 

 

CartCart

WinPCDoctor is a fake system optimization tool. The program is usually installed on your computer by some other software or by exploiting security vulnerabilities in your browser. It will then flood you with endless popup advertisements and warning messages telling you that the system isn’t performing at its full capacity. The sole purpose of this program is to persuade you into buying its full version, which is supposed to optimize your system’s performance and remove various bugs and errors. Once you purchase WinPCDoctor, it will not perform as expected and will not remove all the infection. The program is known to replicate its files upon deletion, this makes it very difficult to remove it on your own.

Type: Trojans

Automatic Detection of WinPCDoctor

WinPCDoctor Technical Report

As new WinPCDoctor details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following WinPCDoctor files with its MD5s were created in the system:

WinPCDoctor has typically the following processes in memory:

• ugescw.exe
• transpaid.exe
• strpmon.exe
• sysrep.exe
• setup_en[1].exe

WinPCDoctor created the following directories, files, paths:

• %ProgramFiles%\WinPCDoctor

WinPCDoctor creates the following registry entries:

• C4514FE1-54AA-42f0-B212-BA8065206F8F
• D961C9CA-59B3-46DD-9CEE-47714CFE2831
• 55B49019-E69E-47FD-A67F-F28D83E5B695
• WinPCDoctor

Important Article Disclaimer