PTools
PTools is a misleading anti-spyware application that claims to be able to rid your computer of dangerous infections. On entering a system, PTools runs fake online system scanners and displays exaggerated scan reports of malware infections. This is done to scare victim's into purchasing the "full version" of PTools, which is presented as the only solution to the infections. PTools will also modify the Windows registry and disable certain security software. PTools should be removed the moment you detect it on your PC.
File System Details
PTools may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Documents and Settings%\[UserName]\Application Data\PC\agent.exe | |
| 2. | %Documents and Settings%\[UserName]\Application Data\PC\faq\images\gimg2.jpg | |
| 3. | %Documents and Settings%\[UserName]\Application Data\PC\faq\images\gimg1.jpg | |
| 4. | %Documents and Settings%\[UserName]\Application Data\PC\faq\guide.html | |
| 5. | %Documents and Settings%\[UserName]\Application Data\PC\faq\images\gimg3.jpg |
Registry Details
PTools may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "pc.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "agent.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PTools
