PC Repair
PC Repair Description
The Countless Fake Repair Features That PC Repair Shows Off
PC Repair is marketed in the form of a supposedly useful defragger program on its website, and trojans such as Vundo, Zlob and Fake Microsoft Security Essentials Alert have also been implicated as causes of PC Repair infections. In most cases, PC Repair will use a fake scanner or warning message to announce that your computer is infected prior to installation, although this isn’t a hard rule.
Once PC Repair has settled itself in, it will launch itself automatically and begin to pester you with fake alerts that are presented in a variety of ways, including through simulated system scans and Windows taskbar-based pop-ups.
You can safely ignore all of PC Repair’s warnings, threats and pleadings for you to take action, since PC Repair isn’t able to detect any of these errors on your computer, and, in fact, many of them are extremely unlikely to occur in the first place. The only purpose they have is to cause you to panic and force you to spend money on an activation key for PC Repair (you should consider using the free code ’8475082234984902023718742058948′ instead before you remove PC Repair).
Close relatives of PC Repair include File Repair, System Repair, Windows Repair, Windows XP System Repair, Windows Vista System Repair and Windows 7 System Repair. You should consider these rogue defragmenters to be just as fraudulent as PC Repair itself.
Doing the Repair Job That Will Put PC Repair Out of Work
Although the foremost concern with any PC Repair is the danger of spending money on it, SpywareRemove.com malware research team has also uncovered a range of other attacks that are coupled with PC Repair infections:
- PC Repair may try to hide the contents of folders. Although this is a Windows Explorer-based attack that works via the Registry, it won’t delete or otherwise alter the actual files. You can use alternative programs to view and access any files that PC Repair tries to conceal.
- PC Repair, like many other types of scamware, will also try to block your security programs so that you find it difficult to delete PC Repair. In many cases, renaming a program file to something generic, such as ‘iexplore.exe,’ will let you duck under PC Repair’s blacklist and launch the relevant application.
- SpywareRemove.com malware researchers have also been unhappy to note that PC Repair has had a new feature added to it that differentiates it from other rogue defraggers in its family – the ability to hide program shortcuts in your Temp folder. Because of this, it’s strongly encouraged that you avoid deleting any files in this folder or using any temporary file removal features until you’ve restored your shortcuts and deleted PC Repair.
PC Repair Automatic Detection Tool (Recommended)
Is your PC infected with PC Repair? To safely & quickly detect PC Repair, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect PC Repair
What happens if PC Repair does not let you open SpyHunter or blocks the Internet?
Visual & GUI Characteristics
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read
the tutorials on how to find malware,
kill unwanted processes,
remove malicious DLLs and
delete other harmful files. Always be
sure to back up your PC before making any changes.
- The following files were created in the system:
# File Name Detection Count 1 Uninstall PC Repair.lnk 403 2 PC Repair.lnk 396 3 %USERPROFILE%\Start Menu\Programs\PC Repair 389 4 %ALLUSERSPROFILE%\ Application Data\ L6kAlMiKb7Fz.exe 183 5 %ALLUSERSPROFILE%\ Application Data\ qdPGjGBlHCkE.exe 103 6 %ALLUSERSPROFILE%\ Application Data\ qdPWjqKGBlHCkE.exe 21 7 %ALLUSERSPROFILE%\ Application Data\ P1kAlMiG2Kb7Fz.exe 7 8 %LocalAppData%\[RANDOM CHARACTERS] N/A 9 %LocalAppData%\[RANDOM CHARACTERS].exe N/A 10 %LocalAppData%\~[RANDOM CHARACTERS] N/A 11 %StartMenu%\Programs\PC Repair\ N/A 12 %StartMenu%\Programs\PC Repair\Uninstall PC Repair.lnk N/A 13 %StartMenu%\Programs\PC Repair\PC Repair.lnk N/A 14 %UserProfile%\Desktop\PC Repair.lnk N/A 15 %Temp%\smtmp\ N/A 16 %Temp%\smtmp\1 N/A 17 %Temp%\smtmp\2 N/A 18 %Temp%\smtmp\3 N/A 19 %Temp%\smtmp\4 N/A
Registry Modifications
Tutorial: To edit and delete registry entries manually, read the tutorial on
how to remove malicious registry entries.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
- The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s's:/ogn:/uyu:/dyd:/c'u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/'wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v'w:/rbs:'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS].exe"
Additional Information
- The following messages's were detected:
# Message 1 Bad sectors on hard drive or damaged file allocation table 2 Critical Error A critical error has occurred while indexing data stored on hard drive. System restart required. 3 Critical Error Hard drive critical error. Run a system diagnostic utility to check your hard disk drive for errors. Windows can't find hard disk space. Hard drive error. 4 Critical Error Hard Drive not found. Missing hard drive. 5 Critical Error RAM memory usage is critically high. RAM memory failure. 6 Critical Error Windows can't find hard disk space. Hard drive error 7 Critical Error! Damaged hard drive clusters detected. Private data is at risk. 8 Critical Error! Windows was unable to save all the data for the file \System32\496A8300. The data has been lost. This error may be caused by a failure of your computer hardware. 9 GPU RAM temperature is critically high. Urgent RAM memory optimization is required to prevent system crash 10 Hard Drive Failure The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system. 11 Low Disk Space You are running very low disk space on Local Disk (C:). 12 PC Repair Diagnostics Windows detected a hard disk error. A problem with the hard drive sectors has been detected. It is recommended to download the following sertified [sic] software to fix the detected hard drive problems. Do you want to download recommended software? 13 Ram Temperature is 83 C. Optimization is required for normal operation. 14 Requested registry access is not allowed. Registry defragmentation required 15 System Error An error occurred while reading system files. Run a system diagnostic utility to check your hard disk drive for errors. 16 System Restore The system has been restored after a critical error. Data integrity and hard drive integrity verification required.
Posted: August 27, 2011 | By SpywareRemove
Share:
Threat Level: 10/10
Rate this article:
Detection Count: 1,009


More

(3 votes, average: 3.33 out of 5)
PC Repair kept us from using IE and could not get access to find a solution to remove it. Thankfully for safe mode, we were able to view this removal guide and use your spyhunter to detect it. Worked like a charm and have not looked back. Such a beautiful thing to get honest help. thanks you spywareremove guys!