By Jim
Updated on Thursday, February 11th, 2010
Your PC Protector or My PC Protector, it doesn’t matter whose protector it is, they’re all malware. But seriously, Your PC Protector and My PC Protector are really two fake antispywares designed to milk money from unsuspecting victims.
The infection process of Your PC Protector is borrowed straight from a typical fake antispyware’s script. That is, sinister individuals plant trojans in websites that offer freebies, gullible victims get attracted to the freebies, download them, and voila! – their computer becomes infected.
Once inside, Your PC Protector “scans” your system and launches pop-ups warning you of the presence of malware threats. Of course, these are all just part of the show. There may not be any threat other than Your PC Protector itself, but just so the victim gets scared enough to heed the recommendations of the fake popups.
So what exactly are the recommendations? Well, the fake popups will urge you to purchase a so-called full version of Your PC Protector. The full version doesn’t do anything at all. But since the victim will be too scared, he won’t mind going ahead with the buy.
This happens to gullible people. However, if you’re smart, you won’t fall for their trap even if your system does get infected.
Symptoms Of Infection
- Your computer is acting slow. Your PC Protector slow down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. Your PC Protector infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious Your PC Protector infection.
Dangers Of Infection
Viruses like Your PC Protector will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.
Some Your PC Protector infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Uninstall Your PC Protector Processes
svchost.exe
dbsinit.exe
Delete Your PC Protector Files
%Documents and Settings%\All Users\Start Menu\Programs\Your PC Protector
%ProgramFiles%\adc32.dll
%ProgramFiles%\alggui.exe
%ProgramFiles%\nuar.old
%ProgramFiles%\skynet.dat
%ProgramFiles%\svchost.exe
%ProgramFiles%\wp3.dat
%ProgramFiles%\wp4.dat
%ProgramFiles%\schtml\dbsinit.exe
%ProgramFiles%\schtml\wispex.html
%ProgramFiles%\schtml\images\i1.gif
%ProgramFiles%\schtml\images\i2.gif
%ProgramFiles%\schtml\images\i3.gif
%ProgramFiles%\schtml\images\j1.gif
%ProgramFiles%\schtml\images\j2.gif
%ProgramFiles%\schtml\images\j3.gif
%ProgramFiles%\schtml\images\jj1.gif
%ProgramFiles%\schtml\images\jj2.gif
%ProgramFiles%\schtml\images\jj3.gif
%ProgramFiles%\schtml\images\l1.gif
%ProgramFiles%\schtml\images\l2.gif
%ProgramFiles%\schtml\images\l3.gif
%ProgramFiles%\schtml\images\pix.gif
%ProgramFiles%\schtml\images\t1.gif
%ProgramFiles%\schtml\images\t2.gif
%ProgramFiles%\schtml\images\up1.gif
%ProgramFiles%\schtml\images\up2.gif
%ProgramFiles%\schtml\images\\w1.gif
%ProgramFiles%\schtml\images\w11.gif
%ProgramFiles%\schtml\images\w2.gif
%ProgramFiles%\schtml\images\w3.gif
%ProgramFiles%\schtml\images\w3.jpg
%ProgramFiles%\schtml\images\word.doc
%ProgramFiles%\schtml\images\wt1.gif
%ProgramFiles%\schtml\images\wt2.gif
%ProgramFiles%\schtml\images\wt3.gif
%ProgramFiles%\Your PC Protector\Your PC Protector.exe
%Programs%\Your PC Protector.lnk
%Desktop%\Your PC Protector.lnk
Remove Your PC Protector Registry Files
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Your PC Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Your PC Protector”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\TaskManager
HKEY_CURRENT_USER\Software\Your PC Protector
HKEY_CLASSES_ROOT\CLSID\{77DC0Baa-3235-4ba9-8BE8-aa9EB678FA02}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{77DC0Baa-3235-4ba9-8BE8-aa9EB678FA02}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ADBUPD
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AdbUpd
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADBUPD
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdbUpd
Popular Search Terms
Remove Your PC Protector
Delete Your PC Protector
Uninstall Your PC Protector
How to get rid of Your PC Protector
How to remove Your PC Protector
Your PC Protector removal
Remove YourPCProtector
YourPCProtector removal
Your-PC-Protector
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal.
Posted under Fake Antispyware | No Comments
