Threat Database Fake Error Messages "WinPC Antivirus Firewall Warning"

"WinPC Antivirus Firewall Warning"

"WinPC Antivirus Firewall" Warning is one of several falsified security alerts generated by WinPC Antivirus. This fake antivirus reports nonexistent problems to fool people into purchasing the program. The "WinPC Antivirus Firewall" Warning message reads as follows:

"FIREWALL WARNING
Hidden file transfer to remote host was detected

WinPC Anrivirus has detected that somebody is trying to transfer your private data via Internet. We strongly recommend you to block the attack immediately.
Details of the attack
Remote host transfer IP: 97.216.34.74
Remote user computer name: FORENSICS
User E-mail:
IP-adress:
Blocking is recommended [Block attack] [Allow]"

"WinPC Antivirus Firewall" Warning is a clear symptom of Win PC Antivirus residing on a computer. Remove WinPCAntivirus in order to remove pop-ups such as "Win PC Antivirus Firewall" Warning.

File System Details

"WinPC Antivirus Firewall Warning" may create the following file(s):
# File Name Detections
1. c:\WINDOWS\ieocx.dll
2. C:\Documents and Settings\\Ta1HnnaIasEcfgF.exe
3. %UserProfile%\Application Data\pcantivirus.exe
4. %UserProfile%\Start Menu\WinPC Antivirus.LNK
5. %UserProfile%\Desktop\WinPC Antivirus.LNK

Registry Details

"WinPC Antivirus Firewall Warning" may create the following registry entry or registry entries:
HKEY_CLASSES_ROOT\IEocxApp.IEocx
HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKEY_CURRENT_USER\Control Panel\don't load "scui.cpl"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Content"
HKEY_CLASSES_ROOT\CLSID\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
HKEY_CLASSES_ROOT\Interface\{4B66E1DF-4DE3-4CDA-83B5-11673EADAB0B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "sysav"
HKEY_CURRENT_USER\Software\WinPC Antivirus
HKEY_CLASSES_ROOT\IEocxApp.IEocx.1
HKEY_CLASSES_ROOT\TypeLib\{A54DC52D-7AAD-4D40-A126-337211631EDC}
HKEY_CURRENT_USER\Control Panel\don't load "wscui.cpl"

URLs

"WinPC Antivirus Firewall Warning" may call the following URLs:

win-pc-antivirus2009.com
winpc-antivirus.com
winpc-antivirus09.com
winpc-antivirus2009.com
winpcantivirus2010.com

Trending

Most Viewed

Loading...