Home > Threats > PcsProtector


Posted on 6 January 2010 under Rogue Programs

1. What is PcsProtector?

PcsProtector is a misleading application, which is characterized by intense security related warning message display in order to trick user into purchasing fake software license.

PcsProtector will initially launch computer scan that will inform user about allegedly found in viruses, asking to get full program version (buy license) in order to remove found threats. All of this is fraud, all the actions asked by PcsProtector should be ignored in order to avoid unsafe and illegal money transfers.

2. PcsProtector screen shot:


3. How to remove PcsProtector:

  1. Internet connection might be disabled or Internet browser might be blocked by PcsProtector, so it won't be possible to download any files to infected computer. In this case please download all files required for PcsProtector removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove PcsProtector download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove PcsProtector.

  5. Restart the computer to complete PcsProtector removal procedure.

4. PcsProtector files:

C:\Program Files\PcsProtector Software\PcsProtector\PcsProtector.exe

5. Hijackthis entries:

O4 - HKLM\..\Run: [PcsProtector] C:\Program Files\PcsProtector Software\PcsProtector\PcsProtector.exe -min