HomeDownloadAboutDonationForum 
Malware removal instructions
Trojan.csrssc
Trojan.winlogin
Trojan.ayacas
Trojan.srenum.sys
Trojan.COMServer
Trojan.pogewaso.dll
Trojan.surfguard
Trojan.safesurf
Rogue.AWM Antivirus
Trojan.Rfu.exe
googletoolbaruser_32.exe
Rogue.AVDefender2011
Trojan.net.net
Rootkit.xprot
Trojan.winlog
Trojan.updpxe32.exe
Hijacker.thewebsiteblock
Trojan.siszyd32
Trojan.shk_v10
Trojan.sdra64
Rootkit.pragmad.sys
Rootkit.ntndis.sys
Rootkit.new_drv
Trojan.navihelper
Trojan.ipsecndis
Adware.ezLife
Trojan.d3dramp32
Trojan.conhost
Rogue.AdvancedSecurityTool
Rogue.asectool

This guide contains three parts

Part 1: Symptom of Rogue program Your PC Protector

Part 2: Manual and automatical removal guide

Part 3: Solution of infection by a new variant

Symptom of Rogue program Your PC Protector

Your PC Protector is known as a rouge antispyware program. It infects your computer without your permission or knowledge via a trojan program. During installation, this malware will configure Windows registry to run it automatically at Windows startup.

Symptom 1. Once this rogue program is active, it will keep displaying the following fake alert or warning message:

Your PC Protector fake alert Your PC Protector fake warning


Symptom 2. The following entries are added in registry so that the rogue program will be running automatically when Windows starts.

HKEY_LOCAL_MACHINE\Software\Microsoft\Window\CurrentVersion\Explorer\Browser Helper Objects\{77DC0Baa-3235-4ba9-8BE8-aa9EB678FA02}

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdbUpd

Symptom 3. The following files will be created.

C:\Program Files\adc32.dll

C:\Program Files\svchost.exe

C:\Program Files\nuar.old

C:\Program Files\wp3.dat

C:\Program Files\alggui.exe

C:\Program Files\wp4.dat

Symptom 4. A registry setting will be modified so that one of the rogue program's file will be running first whenever you run an application, the image below shows the modified registry setting, the normal setting should be : "%1" %*.

Registry setting modified by Your PC Protector

How to remove Your PC Protector rogue program


Manual removal instructions

Step 1. Repair damaged registry setting and delete registry entries added by Your PC Protector:

Copy all the text below in bold into a notepad:


Windows Registry Editor Version 5.00
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Window\CurrentVersion\Explorer\Browser Helper Objects\{77DC0Baa-3235-4ba9-8BE8-aa9EB678FA02}]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdbUpd]
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

Step 2. Save this file as fix.reg on your desktop (remember to choose "Save as" and file type:All when saving it in notepad.)

Step 3. Double click on the fix.reg, then click 'Yes' to emerge it to registry

Step 4. Delete files created by Your PC Protector

Find and delete these files:

C:\Program Files\adc32.dll

C:\Program Files\svchost.exe

C:\Program Files\nuar.old

C:\Program Files\wp3.dat

C:\Program Files\alggui.exe

C:\Program Files\wp4.dat


Automatical Removal instructions

Several antispyware programs can completely remove this malware:

MalwareBytes:
MalwareBytes is an excellent antispyware program, The company of MalwareBytes provides a free version for personal user.
Download and install MalwareBytes Anti-malware (MBAM).

Main interface of MalwareBytes' Anti-Malware

Screenshot of MalwareBytes' Anti-Malware


AVG Antivirus:
AVG Antivirus is another well-known antivirus protection tool. The AVG Free Edition is available free of charge to home users for the life of the product.

Download and install AVG Free Edition

Main interface of AVG

Screenshot of AVG

Solution for infection by a new variant

If you followed the steps above but still get this malware or some objects are denied to delete, your computer possibly gets infected by a new variant or there is some hidden objects that have not been detected. We provide a free diagnostic scan tool ("TheStubware") to scan your computer and generate a scan log file for analysis. This tool is especially used to find those stubborn malware. You can submit your log file to support@TheStubware.com, we will analyze it and send you back a removal script file to remove the new variant or hidden objects found in your log file.

Download and install TheStubware

Leave your comment (Currently 0 comments)

Your Name :
Your Email : Your email will not be exposed to others.
Your comment :
Do you remove this:

Copyright © 2009 - TheStubware.com All rights reserved