Home > Threats > APCprotect

APCprotect - Misleading Application

Posted on 28 December 2009 under Rogue Programs

1. What is APCprotect?

APCprotect is computer software designed by offenders whose primary mission - convincing user to buy licensed program version. Attempts to persuade user is performed using various scare methods, for this reason APCprotect is also referred as scareware.

One of the commonly applied tactics by misleading programs and also used by APCprotect - convincing user that his computer system has been infected with viruses, suggesting corrupt software as virus removal tool afterwards. APCprotect will scan the computer and generate a report, stating that over 700 viruses has been found, which are factious and can not harm the system.

Chances of user to be convinced of APCprotect authenticity are increased by displaying false Windows Security Center, which is identical in appearance compared to an original. Thus the user may think that APCprotect is recommended by Windows as PC protection tool. The following message is displayed by faked Windows Security Center:
  • Spyware Alert! Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of APCprotect and remove spyware threats from your PC.

2. APCprotect screen shot:

APCprotect

3. How to remove APCprotect:

  1. Internet connection might be disabled or Internet browser might be blocked by APCprotect, so it won't be possible to download any files to infected computer. In this case please download all files required for APCprotect removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove APCprotect download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove APCprotect.

  5. Restart the computer to complete APCprotect removal procedure.

4. APCprotect files:

C:\Program Files\APCprotect Software\APCprotect\APCprotect.exe

5. Hijackthis entries:

O4 - HKCU\..\Run: [APCprotect.exe] C:\Program Files\APCprotect Software\APCprotect\APCprotect.exe