PCprotectar

PCprotectar is fake anti-spyware software or misleading program, intended to trick user into purchasing feigned program license.

Misleading the user starts when security-related messages first appear on computer screen, trying to convince victim that the system is in danger, and immediate protection is needed:

• Spyware Alert! Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of PCprotectar and remove spyware threats from your PC.
• Spzprogramm Warnzeichen! Ihr Computer ist mit Spionprogramm infektioniert. Das kann Ihren Dateien schaden und die im Internet zugänglich machen. Klicken bitte hier, um Ihre Kopie von PCprotectar zu registrieren und Ihr PC von Spyprogramm frei zu machen.

Just before the appearance of PCprotectar, a number of randomly-named files will be transferred into C:\Windows and C:\Windows\System32 directories, which later, after computer scan, will be indicated as threats. Although none of these files are dangerous, this is another way to confuse the user and make him think that his machine is infected.

Also, in order to cause stronger user confusion, the Internet browsers will be hijacked. When trying to open random webpage, user will be directed to warning window titled "Reported Insecure Browsing: Navigation blocked", stating that Insecure Internet Activity has been detected and Threat of Virus Attack is in progress:

The user is provided with two options: either to get full advanced real-time protection and continue browsing or continue this website unprotected. By selecting the first option, PCprotectar download page will open, selecting second option will open the desired webpage.

PCprotectar is unreliable and ineffective computer security program, so no cash transfers should be carried out in order to avoid disclosure of private data and pecuniary loss.