PCPrivacyProtect

By GoldSparrow in Potentially Unwanted Programs

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 29
First Seen: September 5, 2017
Last Seen: October 18, 2020
OS(es) Affected: Windows

The PCPrivacyProtect program may be promoted to users as a tool that can test the strength of their password and offer tips on how to enhance weak passwords. The PCPrivacyProtect software does not appear to have an official Web page, and the installation package can be obtained via freeware bundles and fake software update packages only. Samples of PCPrivacyProtect were submitted for analysis online as soon as users began to report problematic behavior. The PCPrivacyProtect program manifested unwanted windows on the desktop, which invited the user to call a toll-free phone line like 888 222 4747 and ask for help. The main window of PCPrivacyProtect may be presented as a simple scanner that features a 'Scan Now' button and a progress bar. However, the first screen generated by PCPrivacyProtect included disturbing statements. A sample of the text can be found below:

  • Slide 1:
  • 'Scan Your PC for Exposed Personal information
    Hackers use exposed personal information to access bank accounts, social media, and other
    sensitive accounts putting your entire identity at risk! Scan your System Now to see how
    vulnerable you are.
    [Scan Now|button]
    Warning: These results may shock you. Please remain calm and contact your Certified Security Expert.'

  • Slide 2:
  • 'Scanning Your System for Vulnerable Passwords
    Please wait we check your system to see what personal information may be exposed to theft or attack.
    [PROGRESS BAR]
    Scanning in progress...'

As soon as the progress bar is loaded completely, the PCPrivacyProtect would present the users with a frightening message that their "personal information and login details are exposed." Lab tests revealed that the PCPrivacyProtect program is a fake privacy enhancement tool and you should not trust it. The PCPrivacyProtect desktop app does not access password caches and does not perform as you are lead to believe. The "scan operation" is an animation meant to mislead users. The last screen message generated by PCPrivacyProtect is titled 'Warning: Your Information is Exposed!' and presents the following text:

  • Slide 3:
  • 'Warning: Your Information is Exposed!
    Your personal Information and login details are Exposed and Vulnerable. it is
    strongly recommended that you clean your PC before further use.
    Call a Certified Security Expert Now: +1 888 222 4747'

The PCPrivacyProtect fake scanner may be used to promote phone numbers associated with technical support tactics. Analysis of PCPrivacyProtect provided evidence that it scans your password caches in Google Chrome, Mozilla Firefox, and Internet Explorer but it lists your accounts only. The fake scan results are listed on a slide that may include the login pages for the sites where you have created accounts. We advise against making calls to 888 222 4747 and other phones lines that may be promoted via the PCPrivacyProtect rogue app. The PCPrivacyProtect Rogue Scanner is almost identical to the PCRegFixer Registry Cleaner and the 'MSSecTeam' program windows, which were found to promote identical services. It is recommended that you block untrusted tools from accessing your passwords. If you find the PCPrivacyProtect program on your system—use a credible anti-malware scanner to have it removed safely.

Trending

Most Viewed

Loading...