Free malware removal tool to remove PCprotectar

PCprotectar is a fake antivirus which installs itself on your system with/without your will. This fake Antivirus comes from WiniSoft family, they have just changed the name of the application, the file names but the rest is the same. Its purpose is to scare you by posting false scan results so that you spend money on buying a full version which by the way doesn't even exist. Do not purchase this bogus application. Remove PCprotectar as soon as possible from your system.
Beware of this scam.

To remove PCprotectar (Uninstall PCprotectar)

• Download and extract this removal tool for PCprotectar
• Click on the delete button

PCprotectar will be removed in 10s. Restart your computer when it's finished.

Process

• PCprotectar.exe

Folder

• %CommonPrograms%\PCprotectar
• %Temp%\nsa2.tmp
• %ProgramFiles%\PCprotectar Software
• %ProgramFiles%\PCprotectar Software\PCprotectar

Files

• %CommonDesktopDir%\PCprotectar.lnk
• %CommonPrograms%\PCprotectar\1 PCprotectar.lnk
• %CommonPrograms%\PCprotectar\2 Homepage.lnk
• %CommonPrograms%\PCprotectar\3 Uninstall.lnk
• %Temp%\nsa2.tmp\nsProcess.dll
• %ProgramFiles%\PCprotectar Software\PCprotectar\PCprotectar.exe
• %ProgramFiles%\PCprotectar Software\PCprotectar\uninstall.exe
• %System%\wbem\Performance\WmiApRpl_new.ini
• %Temp%\[random].exe

Registry

Regisytry key created

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCprotectar
• HKEY_LOCAL_MACHINE\SOFTWARE\PCprotectar
• HKEY_CURRENT_USER\Software\PCprotectar

Registry values created

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCprotectar
  
  • DisplayName = "PCprotectar"
  • UninstallString = ""%ProgramFiles%\PCprotectar Software\PCprotectar\uninstall.exe""
  • NoModify = 0x00000001
  • NoRepair = 0x00000001
• HKEY_LOCAL_MACHINE\SOFTWARE\PCprotectar
  
  • Lang = "English"
  • Install_Dir = "%ProgramFiles%\PCprotectar Software\PCprotectar"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
  
  • PCprotectar = "%ProgramFiles%\PCprotectar software\PCprotectar\PCprotectar.exe"
  • [random].exe = %Temp%\[random].exe
• HKEY_CURRENT_USER\Software\PCprotectar
  
  • CurrentVersion =
  • "771eb5b6f272744584a5567cff88f8a7d17c6bcd7ae..."
  • AgentsSettings = 0x00000001