PC Virus Protector

I installed a program called PC Virus Protector. I did a scan with the program and it told me that I have something like 300+ viruses on my computer. I was skeptical but decided to try to use the clear button anyway. Apparently I need to pay a little under 50$ to upgrade the program to be able to use the advanced functions. About every 45 seconds or so I get a little pop-up from the bottom of my screen where the files are telling me about spyware alert and all other kinds of alerts. I tried browsing with Firefox and every page turns into a warning about how I'm in danger of surfing unprotected. I click to run without the update and if I click ok it still sends me to the page to buy the bleepty program.
I finally had enough with the faulty program and decided to uninstall it, well..It's not in my list of uninstallable programs. It has no close or disable function. and It is no where to be found on my C drive.

Can somebody please instruct me how to destroy or remove this program?

A Google search reveals nothing for a program by that name.

Louis

Do you have a link?

Edited by hamluis, 16 February 2010 - 11:22 AM.

Hello... perhaps it is called "Your PC Protector "... In any event I am moving you to the Am I Infected forum from XP so we can clean this..

See if you can do these.

First run RKill....

Please download Rkill by Grinler and save it to your desktop.Link 2
Link 3
Link 4

• Double-click on the Rkill desktop icon to run the tool.
• If using Vista, right-click on it and Run As Administrator.
• A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
• If not, delete the file, then download and use the one provided in Link 2.
• If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
• If the tool does not run from any of the links provided, please let me know.

You will need to run the application again if rebooting the computer occurs along the way as the malware programs will start again.



Next run MBAM (MalwareBytes):

NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.

Please download Malwarebytes Anti-Malware and save it to your desktop.

alternate download link

MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.

• Make sure you are connected to the Internet.
• Double-click on mbam-setup.exe to install the application.
• When the installation begins, follow the prompts and do not make any changes to default settings.
• When installation has finished, make sure you leave both of these checked:
  • Update Malwarebytes' Anti-Malware
  • Launch Malwarebytes' Anti-Malware
• Then click Finish.

MBAM will automatically start and you will be asked to update the program before performing a scan.

• If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
• If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.

On the Scanner tab:

• Make sure the "Perform Quick Scan" option is selected.
• Then click on the Scan button.
• If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
• The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
• When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
• Click OK to close the message box and continue with the removal process.

Back at the main Scanner screen:

• Click on the Show Results button to see a list of any malware that was found.
• Make sure that everything is checked, and click Remove Selected.
• When removal is completed, a log report will open in Notepad.
• The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
• Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
• Exit MBAM when done.

Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

A Google search reveals nothing for a program by that name.

Louis

Do you have a link?

Well it was a pop up that had the windows security center icon and not a website download. https://www.simplesecurebilling.com/buy.php...ache=1266341260 This is the website to buy the full version, besides that I don't know where else to find it.





That's the layout of it.

Please run the tools in post 3.. post the MBAM log and tell us if it runnning better.

Please run the tools in post 3.. post the MBAM log and tell us if it runnning better.

Well apparently I was infected with some things..But it didn't help get rid of the program

I don't mean to butt in here, I'm not offering advice. WhoIs for "Pcvirusprotector.com"---

http://whois.domaintools.com/http:/www.pcvirusprotector.com

Registrant:
WonderWeb Technologies
Bili Patra
Kalyan Society - 2
Rajkot, 360002
India

Domain Name: PCVIRUSPROTECTOR.COM
Created on: 20-Jul-07
Expires on: 20-Jul-10
Last Updated on: 01-Aug-09

Google is your FRIEND! http://www.google.com/#hl=en&source=hp...c5aa4278f68e4a4

RUH-ROH, RASTRO!

Edited by Union_Thug, 16 February 2010 - 06:13 PM.

Picture above shows the main executable..

Usually the program blocks all programs from running except internet explorer, hence why you were not able to run the apps that boopme sent you.
what I did to get around the app from running, I seen that the app had to load the files it needed to run at startup so all I did was bring up task
manager as soon as windows came up (Before the app had a chance of running) and I was able to see the process under the processes tab in task
manager and right click, end process and then I was able to use all my apps again.. But, of course after I ended the process I scanned with
superantispyware to help remove it, that is currently what I am doing is letting it scan the computer for infections...

The process to end should be the same as mine "anjcjcxv7.exe"



Hopes this helps you,
XxSmackxX

The process to end should be the same as mine "anjcjcxv7.exe"

In many cases, malware generates random names for its executables, so the file name on your system is simply the file name on your system. A google of that file name returns no results, which indicates to me that the file name is random.