Home > Threats > PCprotectar


Posted on 7 January 2010 under Rogue Programs

1. What is PCprotectar?

PCprotectar is fake anti-spyware software or misleading program, intended to trick user into purchasing feigned program license.

Misleading the user starts when security-related messages first appear on computer screen, trying to convince victim that the system is in danger, and immediate protection is needed:
  • Spyware Alert! Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of PCprotectar and remove spyware threats from your PC.
  • Spzprogramm Warnzeichen! Ihr Computer ist mit Spionprogramm infektioniert. Das kann Ihren Dateien schaden und die im Internet zugänglich machen. Klicken bitte hier, um Ihre Kopie von PCprotectar zu registrieren und Ihr PC von Spyprogramm frei zu machen.
Just before the appearance of PCprotectar, a number of randomly-named files will be transferred into C:\Windows and C:\Windows\System32 directories, which later, after computer scan, will be indicated as threats. Although none of these files are dangerous, this is another way to confuse the user and make him think that his machine is infected.

Also, in order to cause stronger user confusion, the Internet browsers will be hijacked. When trying to open random webpage, user will be directed to warning window titled "Reported Insecure Browsing: Navigation blocked", stating that Insecure Internet Activity has been detected and Threat of Virus Attack is in progress:

Internet Explorer hijacked by PCprotectar

The user is provided with two options: either to get full advanced real-time protection and continue browsing or continue this website unprotected. By selecting the first option, PCprotectar download page will open, selecting second option will open the desired webpage.

PCprotectar is unreliable and ineffective computer security program, so no cash transfers should be carried out in order to avoid disclosure of private data and pecuniary loss.

2. PCprotectar screen shot:


3. How to remove PCprotectar:

  1. Internet connection might be disabled or Internet browser might be blocked by PCprotectar, so it won't be possible to download any files to infected computer. In this case please download all files required for PCprotectar removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove PCprotectar download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove PCprotectar.

  5. Restart the computer to complete PCprotectar removal procedure.