PC Repair

PC Repair Description

ScreenshotPC Repair is one of many different versions of a fake defragmentation program that has infected computers all around the world. This fake defragmenter is known for creating a large number of infected computers, including a continuous stream of fake error messages, pop-up notifications and security alerts. Other problems associated with a PC Repair infection include severe performance problems with your computer, files that disappear and blocked access to the Internet and to executable files. PC Repair is part of the FakeSysDef family of rogues security programs that were designed to convince you that your computer has severe problems. Then, the criminals behind PC Repair attempt to charge you for a useless "full version" of this program. ESG PC security researchers recommend removing PC Repair with a real PC repair application.

Stopping the Bogus Defragmentation Tool PC Repair

ESG malware analysts recommend ignoring all alerts and error messages that are displayed by PC Repair. This fake computer optimization tool has absolutely no defragmenting or computer security capabilities. To remove some of the most annoying PC Repair symptoms, ESG PC security researchers suggest using the 8475082234984902023718742058948 serial number. This will make PC Repair think that you have fallen for the scam and purchased a "full version" of this useless program. It is important to point out that entering this registration number will not remove the PC Repair infection from your computer system; it will only make the most annoying symptoms of this fake defragmenter stop temporarily. This can allow you to gain access to your legitimate security software, so that you can scan your hard drive and detect and remove PC Repair.

Trojans Associated with PC Repair and Its Many Clones

There are dozens of clones of the fake defragmenter PC repair. Some of these include System Defragmenter, Ultra Defragger, HDD Control, Win HDD, Win Defrag, Win Defragmenter, Disk Doctor, Hard Drive Diagnostic, HDD Diagnostic, HDD Plus, HDD Repair, HDD Rescue, Smart HDD, Defragmenter, HDD Tools, Disk Repair, Windows Optimization Center, Scanner, HDD Low, Hdd Fix.

All of these consist of the same program as PC Repair, with a slightly different interface and splash screen. Hackers create these clones to make its versions difficult to track and remove. The PC Repair fake defragmenter is associated with several Trojans, including the Fake Microsoft Security Essentials Alert Trojan, the Vundo Trojan, and the Zlob Trojan. All of these malware infections are designed to use deceptive tactics to convince a computer user to download and install rogue security programs like PC Repair.

Technical Information

Screenshots & Other Imagery

PC Repair Image 1 PC Repair Image 2 PC Repair Image 3 PC Repair Image 4 PC Repair Image 5 PC Repair Image 6 PC Repair Image 7 PC Repair Image 8 PC Repair Image 9 PC Repair Image 10

File System Details

PC Repair creates the following file(s):
# File Name Size MD5
1 %LocalAppData%\[RANDOM CHARACTERS].exe
2 %StartMenu%\Programs\PC Repair\PC Repair.lnk
3 %Temp%\smtmp\
4 %Temp%\smtmp\3
5 %StartMenu%\Programs\PC Repair\
6 %UserProfile%\Desktop\PC Repair.lnk
7 %Temp%\smtmp\2
8 %LocalAppData%\[RANDOM CHARACTERS]
9 %StartMenu%\Programs\PC Repair\Uninstall PC Repair.lnk
10 %Temp%\smtmp\1
11 %Temp%\smtmp\4
12 %ALLUSERSPROFILE%\Application Data\P1kAlMiG2Kb7Fz.exe 414,208 6cb0128ef745a1472606f1d4c82e914e
13 %ALLUSERSPROFILE%\Application Data\qdPWjqKGBlHCkE.exe 457,216 dff7eac5c0c22591552da891c5364bfd
14 %ALLUSERSPROFILE%\Application Data\qdPGjGBlHCkE.exe 466,944 7278fc37d52351374587e0e2f0d26aa2
15 %ALLUSERSPROFILE%\Application Data\L6kAlMiKb7Fz.exe 462,848 cabf1f8a66e33b0dfd6a6c8fad28a1e1
16 %ALLUSERSPROFILE%\Application Data\WdPGjGBlKKkE.exe 448,512 01ef539c0d873d506f7c337b7cbbcfed

Registry Details

PC Repair creates the following registry entry or registry entries:
RegistryKey
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s's:/ogn:/uyu:/dyd:/c'u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/'wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v'w:/rbs:'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"

More Details on PC Repair

The following messages associated with PC Repair were found:
Bad sectors on hard drive or damaged file allocation table
Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.
Critical Error
Hard drive critical error. Run a system diagnostic utility to check your hard disk drive for errors. Windows can’t find hard disk space. Hard drive error.
Critical Error
Hard Drive not found. Missing hard drive.
Critical Error
RAM memory usage is critically high. RAM memory failure.
Critical Error
Windows can't find hard disk space. Hard drive error
Critical Error!
Damaged hard drive clusters detected. Private data is at risk.
Critical Error!
Windows was unable to save all the data for the file \System32\496A8300. The data has been lost. This error may be caused by a failure of your computer hardware.
GPU RAM temperature is critically high. Urgent RAM memory optimization is required to prevent system crash
Hard Drive Failure
The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system.
Low Disk Space
You are running very low disk space on Local Disk (C:).
PC Repair Diagnostics
Windows detected a hard disk error.
A problem with the hard drive sectors has been detected. It is recommended to download the following sertified [sic] software to fix the detected hard drive problems. Do you want to download recommended software?
Ram Temperature is 83 C. Optimization is required for normal operation.
Requested registry access is not allowed. Registry defragmentation required
System Error
An error occurred while reading system files. Run a system diagnostic utility to check your hard disk drive for errors.
System Restore
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.

Related Posts

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.