WinPC Defender

Alias: WinPCDefender

Description: WinPC Defender is rogue spyware removal program. It is a clone of such rogue anti-spyware as XP Police Antivirus, IE-Security and WinDefender 2009. It may be secretly installed into your computer by a trojan, downloaded from one of many fraudulent Fake Scanner Sites. Once installed, WinPC Defender "scans" system and displays exaggerated results. It displays annoying pop-up windows and system alerts stating that computer is infected or under attack. WinPC Defender tries to scare the user and push it into purchasing of "full" version. It may slowdown computer performance, limit internet connection speed and even cause system crash.

Threat type:

Ransomware - Ransomware is a software application that infects a computer and asks for money to have the infection removed.

Trojan - A Trojans or Trojan Horse is any programs that installs itself secretly, quite often with sinister intent. Once installed, the trojan author (hacker) can gain complete control of the infected PC. Trojans are usually designed to steal sensitive information and/or destroy the system. Trojans can be distributed as unsolicited email attachments, or bundled with freeware and shareware programs.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer and / or to protect your privacy.

Detection:
SpyNoMore removes WinPC Defender: Yes

Threat risk: Very High Risk

Extremely dangerous malware. Uses stealth installation, randomly named entries and has the capability to self update or resurrect after incomplete removal. Almost impossible to remove manually. Category mostly consists of trojans and spyware.

Symptoms:

Popup messages claiming that your computer is infected;

Stealth installation of WinPC Defender without your concent or knowlege;

WinPC Defender is launched after system restart and stays resident in background.

Browser could be opening to about:blank.

WinPC Defender Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with WinPC Defender, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
svchasts.exe
Windows Police Pro.exe

File Signatures:


Registered Dll (Dynamic Link Library) Signatures:
N/A

Internet Explorer Integration: Yes

Folder Signatures:
N/A

Registry Signatures:
N/A

SpyNoMore Collected Residual File Signatures:
N/A

See Also:
smartbizsearch.com
Adware Eradicator
Spyware Fighter
ThreatNuker
Total Security
ErrorSweeper
6700.cn
VirusAlarm
RegistryDefender
Ertfor