If you have installed video codecs from suspicious websites in order to watch online movies, then you could have become infected with PcsProtector.  This rogue antispyware program will distribute itself by using Trojans to infiltrate your PC.

Once this Trojan has gained access, it will embed itself into your registries and configure itself to run automatically each time you login to Windows.   Suddenly, you will start receiving a deluge of fake security alerts and system scans that provide false results about innocuous infections.  In fact, the files that are displayed are the same ones that are randomly named and placed there by PcsProtector itself.

After the inundation of fake messages, you will be prompted to purchase a “full version” of PcsProtector.  You would be doing yourself a favor to ignore these warnings and keep your money in your pocket.  Here is a sample of the warning message displayed:

Spyware Alert!
Your computer is infected with spyware. It could damage your
critical files or expose your private data on the Internet. Click
here to register your copy of PcsProtector and remove
spyware threats from your PC.

Type: Rogue Security Application

Related file contents:
main_config.xml, PcsProtector.exe, Uninstall.exe, 10566viruz2809.dll, 10652not-a-virus69z.cpl, 1092sp5wzre1923.bin, 10501not-a-vizus359.dll, 105259orz1d2.dll, 1058ztroj95e.cpl, PcsProtector.lnk, 1 PcsProtector.lnk, 2 Homepage.lnk, 3 Uninstall.lnk

Manual Removal Instructions:

Manual removal can be done, but it is dangerous if you do not know what you are doing.  One false move and you can disable your PC and render it useless.  If you are confident in your abilities then you will need to…

Delete the following processes thoroughly:

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run pcsprotector
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run pcsprotector

Followed by deleting these registry values:

HKEY_CURRENT_USER\software\pcsprotector agentssettings
HKEY_CURRENT_USER\software\pcsprotector currentversion
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run pcsprotector
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run pcsprotector
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\pcsprotector displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\pcsprotector nomodify
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\pcsprotector norepair
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\pcsprotector uninstallstring
HKEY_LOCAL_MACHINE\software\pcsprotector install_dir
HKEY_LOCAL_MACHINE\software\pcsprotector lang
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run pcsprotector
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run pcsprotector

You will now need to delete the following files:

%program_files%\pcsprotector software\pcsprotector\pcsprotector.exe
%common_programs%\pcsprotector\1 pcsprotector.lnk
%common_programs%\pcsprotector\2 homepage.lnk
%common_programs%\pcsprotector\3 uninstall.lnk
%program_files%\pcsprotector software\pcsprotector\uninstall.exe
%program_files%\pcsprotector software\pcsprotector\pcsprotector.exe
%program_files%\pcsprotector software\pcsprotector\uninstall.exe

Remove the following folder(s):

%program_files%\pcsprotector software
%program_files%\pcsprotector software\pcsprotector

Successful manual removal takes time, patience and even then these programs have a tendency to come right back.  To ensure safe and thorough removal there is an anti-spyware application called ZookaWare PC Cleaner that will get the job done right.  Created by the malware removal experts at ZookaWare, ZookaWare PC Cleaner has been recognized by numerous independent agencies for its excellence.  When others have failed, ZookaWare PC Cleaner produces results.

Download Free Scan
Cyberlab runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select Cyberlab and click Uninstall.

Leave a Reply

Your email address will not be published.