Windows Vista Blog

Belonging to the same family of fake anti-spyware as Windows Police Pro and Windows Antivirus Pro, Your PC Protector is a rogue software program that tries to trick users into purchasing a software license. Your PC Protector gets installed on a user’s system via Trojans that get downloaded from the internet or by fake video codecs or attachments of spam emails. Once established on the user’s system, Your PC Protector starts to perform fake virus scans and generates false reports that state that the system is under threat. It also hijacks the user’s web browser and by installing a Browser Helper Object, redirects the user’s searches to websites that openly promote Your PC Protector. Furthermore, Your PC Protector repeatedly urges the user to buy a license for the ‘full’ version of the software, claiming that the currently installed ‘trial’ version is insufficient to clean the user’s system. It is important to remember that Your PC Protector is a fake program and it is therefore incapable of performing any scanning or cleaning methods on any system.

As soon as you find a copy of this rogue software on your computer, you should take steps to remove it. The process of Your PC Protector removal is outlined below:

File Removal Procedures

The first step in Your PC Protector removal is to kill the following processes:

• alggui.exe
• svchost.exe
• dbsinit.exe

The next step is to unregister the following DLL file which is related to Your PC Protector:

• adc32.dll

The final step in file removal is to delete the following files and folders:

• %Documents and Settings%\All Users\Desktop\Your PC Protector.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Your PC Protector
• %ProgramFiles%\adc32.dll
• %ProgramFiles%\alggui.exe
• %ProgramFiles%\nuar.old
• %ProgramFiles%\skynet.dat
• %ProgramFiles%\svchost.exe
• %ProgramFiles%\wp3.dat
• %ProgramFiles%\wp4.dat
• %ProgramFiles%\schtml\dbsinit.exe
• %ProgramFiles%\schtml\wispex.html
• %ProgramFiles%\schtml\images\i1.gif
• %ProgramFiles%\schtml\images\i2.gif
• %ProgramFiles%\schtml\images\i3.gif
• %ProgramFiles%\schtml\images\j1.gif
• %ProgramFiles%\schtml\images\j2.gif
• %ProgramFiles%\schtml\images\j3.gif
• %ProgramFiles%\schtml\images\jj1.gif
• %ProgramFiles%\schtml\images\jj2.gif
• %ProgramFiles%\schtml\images\jj3.gif
• %ProgramFiles%\schtml\images\l1.gif
• %ProgramFiles%\schtml\images\l2.gif
• %ProgramFiles%\schtml\images\l3.gif
• %ProgramFiles%\schtml\images\pix.gif
• %ProgramFiles%\schtml\images\t1.gif
• %ProgramFiles%\schtml\images\t2.gif
• %ProgramFiles%\schtml\images\up1.gif
• %ProgramFiles%\schtml\images\up2.gif
• %ProgramFiles%\schtml\images\\w1.gif
• %ProgramFiles%\schtml\images\w11.gif
• %ProgramFiles%\schtml\images\w2.gif
• %ProgramFiles%\schtml\images\w3.gif
• %ProgramFiles%\schtml\images\w3.jpg
• %ProgramFiles%\schtml\images\word.doc
• %ProgramFiles%\schtml\images\wt1.gif
• %ProgramFiles%\schtml\images\wt2.gif
• %ProgramFiles%\schtml\images\wt3.gif
• %ProgramFiles%\Your PC Protector\Your PC Protector.exe
• %Programs%\Your PC Protector.lnk
• %Desktop%\Your PC Protector.lnk

Once these files and folders have been deleted, Your PC Protector no longer resides on your file system.

Registry Removal Procedures

In order to complete the process of Your PC Protector removal, you should remove the following registry entries as well:

• HKEY_CURRENT_USER\Software\Your PC Protector
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Your PC Protector
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Your PC Protector”
• HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\TaskManager
• HKEY_CURRENT_USER\Software\Your PC Protector
• HKEY_CLASSES_ROOT\CLSID\77DC0Baa-3235-4ba9-8BE8-aa9EB678FA02
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\77DC0Baa-3235-4ba9-8BE8-aa9EB678FA02
• HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ADBUPD
• HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AdbUpd
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADBUPD
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdbUpd

After you have completed this step, your computer is completely safe from Your PC Protector. Additionally, a full system scan using genuine antivirus software such as Spyware Doctor with Antivirus is recommended in order to make sure that no additional threats reside on the PC.

Conclusion

Manual Your PC Protector removal is not recommended for inexperienced users, as any mistake made during removal could damage your system. In order to avoid this, inexperienced users should utilize a web-based removal service such as www.onlinecomputerrepair.org.