FANDOM


Your PC Protector is a rogue anti-spyware program that uses aggressive techniques to stop the user from removing it from their computer. This malware is installed via Trojans that install it on to the user's computer without permission.

Payloads

Once installed the rogue will attempt to stop the user from running any executable programs and will display an alert when the user runs them stating that the program is infected. It will also automatically restart itself via a Windows service every time the user shuts down the process.

Once running, Your PC Protector will scan the user's computer and state that there are numerous infections on it. It will not, though, allow the user to remove any infections until the user purchase the program. 

While the rogue is running, the user will also see fake security warnings appear on their desktop. These warnings will state that the user's computer is infected, that malicious programs have been found running on their computer, or that the user is under attack. The Trojan that installed Your PC Protector will also display fake security alerts and messages on the user's desktop. These alerts will state that active malware has been found, that the user is being attacked by a remote computer, or that the user is sending sensitive data to a remote location. The text of one of these alerts is:

Security Warning
There are critical system files on your computer that were modified by malicious program. It will cause unstable work of your system and permanent data loss. Click here to undo performed modifications and remove malicious software. (Highly Recommended)
Community content is available under CC-BY-SA unless otherwise noted.