Your PC Protector
February 3, 2010 Threat level:
(7 / 10)
Your PC Protector description
Your PC Protector is not a real system security software. This bogus program only imitates the functions and actions of an actual system protection tool while its actual purpose is to confuse the user and make them purchase the license for using Your PC Protector. The application is a part of an online scam which starts with the user visiting some corrupt website which either suggests downloading video codecs or employs trojans to get Your PC Protector on your computer and install it.
Once on board, Your PC Protector will launch every time you start your system and perform false security scans finding numerous imaginary infections. It will also display pop-up warnings about various threats and parasites being present in your system. All this is fake. The only malicious application that should be removed in this case is Your PC Protector itself.
New processes created
Your PC Protector.exedbsinit.exe
svchost.exe
alggui.exe Learn how to remove malicious processes
New Your PC Protector registry entries created
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\TaskManagerHKEY_CURRENT_USER\Software\Your PC Protector
HKEY_CLASSES_ROOT\CLSID\{77DC0Baa-3235-4ba9-8BE8-aa9EB678FA02}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{77DC0Baa-3235-4ba9-8BE8-aa9EB678FA02}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ADBUPD
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AdbUpd
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADBUPD
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdbUpd Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries
New files and directories created
c:\Program Files\adc32.dllc:\Program Files\alggui.exe
c:\Program Files\nuar.old
c:\Program Files\skynet.dat
c:\Program Files\svchost.exe
c:\Program Files\wp3.dat
c:\Program Files\wp4.dat
c:\Program Files\schtml
c:\Program Files\schtml\dbsinit.exe
c:\Program Files\schtml\wispex.html
c:\Program Files\schtml\images
c:\Program Files\schtml\images\i1.gif
c:\Program Files\schtml\images\i2.gif
c:\Program Files\schtml\images\i3.gif
c:\Program Files\schtml\images\j1.gif
c:\Program Files\schtml\images\j2.gif
c:\Program Files\schtml\images\j3.gif
c:\Program Files\schtml\images\jj1.gif
c:\Program Files\schtml\images\jj2.gif
c:\Program Files\schtml\images\jj3.gif
c:\Program Files\schtml\images\l1.gif
c:\Program Files\schtml\images\l2.gif
c:\Program Files\schtml\images\l3.gif
c:\Program Files\schtml\images\pix.gif
c:\Program Files\schtml\images\t1.gif
c:\Program Files\schtml\images\t2.gif
c:\Program Files\schtml\images\Thumbs.db
c:\Program Files\schtml\images\up1.gif
c:\Program Files\schtml\images\up2.gif
c:\Program Files\schtml\images\w1.gif
c:\Program Files\schtml\images\w11.gif
c:\Program Files\schtml\images\w2.gif
c:\Program Files\schtml\images\w3.gif
c:\Program Files\schtml\images\w3.jpg
c:\Program Files\schtml\images\word.doc
c:\Program Files\schtml\images\wt1.gif
c:\Program Files\schtml\images\wt2.gif
c:\Program Files\schtml\images\wt3.gif
c:\Program Files\Your PC Protector
c:\Program Files\Your PC Protector\Your PC Protector.exe
%UserProfile%\Start Menu\Programs\Your PC Protector
%UserProfile%\Desktop\Your PC Protector.lnk Learn how to unregister malicious DLL files
How to remove Your PC Protector
To remove Your PC Protector manually you must block rogue Your PC Protector related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious Your PC Protector files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.