Fake Anti Spyware.PCTotalDefender - Spyware Detector

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / Fake Anti Spyware.PCTotalDefender

Fake Anti Spyware.PCTotalDefender Technical Details

Category

Fake Anti Spyware

Discovered

7/14/2008 11:15:00 AM

Modified

7/14/2008 14:37:00 AM

Threat Level

Critical

Description

PCTotalDefender is a Fake Anti Spyware. It is related to AntiSpywareMaster, Antispywaresuite, AntivirusForAll, AVsystemcare and WinSecureAv. Once PCTotalDefender installs in your computer, it gives exaggerated report and claims of spyware found or false positives but not remove spyware unless the user purchases the program. As well as it may have come bundled in other Fake Anti Spyware like System Doctor and prompt bogus popup and system notifications.

Summary

The hosts file was updated with the following url-to-ip mappings : n/a
The following http urls were started :
pctotaldefender.com
stat.pctotaldefender.com
download.pctotaldefender.com
Generated smtp traffic : n/a
There was a new connection established with a remote IRC Server : n/a
The Following Hidden Entries Created :
hidden folder: %ROOT%\pctotaldefender\avquar
The following internet connection was established: n/a

Processes

AntiVirusInstallFree_en.exe, ugac.exe, bm.exe

Drivers

%SYSDIR%\drivers\dhlp.sys

Folders created

%PROGRAM_FILES_COMMON%\PCTotalDefender
%PFDIR%\PCTotalDefender
%ROOT%\PCTotalDefender

Browsed Sites

http://pctotaldefender.com/

When the Fake Anti Spyware is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in Bytes)
..\pctotaldefender.lnk				1494
..\pctotaldefender\bm.exe	1.0.29.0		ebd61126d28dc4dc943a782343524a6d	425984
..\pctotaldefender\ugac.exe			7eac40fffe3bdfa16bde8a2763b14434	158426
..\pctotaldefender\activate.exe			1a9090c0798f89795d653f1065be81f7	152064
..\pctotaldefender\dhlp.dll	0.1.31.0	AntiVirus	ff13f4141c13d2ce139a017132bc3751	196608
..\plugins\scanadwr.dll			f9c8302f2c505740820a88581d29efab	246310
..\plugins\scanbcdr.dll			4001f8bd5d48ec30b61479bfae91e157	913355
..\plugins\scandldr.dll			84482d14152a9202c605d61d77809a7d	1123285
..\plugins\scandos1.dll			4e735d206c4041bcbbe31a9b50ea6f86	1265683
..\plugins\scanemul.dll			8898d6f8672d55910871426b87a61a1a	28301
..\plugins\scanfunc.dll			636e5d27c3798e12a97f5d8b37620f98	63004
..\plugins\scankrnl.dll	2.7.6.1		91344f456badf4053c01663e8b8dd8e0	293888
..\plugins\scanmcr1.dll			a652cf6d85403a8477df041f35be9023	200849
..\plugins\scanothr.dll			0d0ed5f72760c6a073b48417078b1368	40707
..\plugins\scanscr.dll			afbbdcb570928407bd8f8602ba54859b	276532
..\plugins\scantool.dll			a91ddae3949f2d954b1e435a68d7624a	114320
..\plugins\scantroj.dll			8171cd21864d286810bac74950e18b0c	1045102
..\plugins\scanwin1.dll			df537de9898f69f7a4d3305f9a179991	836351
..\plugins\unacpu.dll			46b810693c6db63897949566248281fd	9728
..\plugins\unadbx.dll			3f742797f3a89980159019feb17a424b	286720
..\plugins\unamscan.dll			df6958e9ba1d73e7aef47ef6c46281df	47616
..\plugins\unmime.dll			dd1f43db6001736e5f35c99edfe4066f	44202
..\plugins\unpack.dll			4ecbf71a0ee92ad5133fe38f2da1ea57	331275
..\plugins\unpacks.dll			e17370296861d8a15f9c6bdd4b2c2df0	373419
..\plugins\unpacks2.dll			5ecbb6c3b335f05b857ae0c56484b279	73091

When the Fake Anti Spyware is executed, it creates the following Registry entries:

•	..\software\pctotaldefender
•	..\software\microsoft\windows\currentversion\run\"pctotaldefender"
•	..\software\pctotaldefender
•	..\system\currentcontrolset\services\dhlp\blocked\\device\harddiskvolume1\"pctotaldefender"

Snapshot

Recommendation to remove Fake Anti Spyware.PCTotalDefender

Spyware Detector can remove Fake Anti Spyware.PCTotalDefender, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat