PC-Care

PC-Care

Found: 
2011-01-21
Description: 

Win32.FraudTool.PCCare is a rogue anti-spyware application. It may give exaggerated threat reports on the compromised computer then ask the user to purchase a registered version to remove those reported threats.

 

Credit: Tachikoma

Known system changes: 

Files

Folders

%ProgramFiles%\pc-care3
%StartMenu%\pc-care3

RegistryEntries

Key: HKEY_CURRENT_USER\Software\pc-care3
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\pc-care3
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Value: pc-care3
Data: "C:\Program Files\pc-care3\launcher.exe" "C:\Program Files\pc-care3\pccare3up.exe"