Home > Threats > PcTurboPro

What is PcTurboPro

Posted on 15 July 2007 under Rogue Programs

1. What is PcTurboPro?

PcTurboPro falls into Rogue Antispyware software category. It is silently installed through trojan. PcturboPro is annoying and fraudulent personal computer application and should be deleted immediately. Uninstalling program using Add/Remove Programs will not help. PcTurboPro infection can only be removed using appropriate anti-spyware software (see "How to remove" section below) or by experienced computer technician.
PcTurboPro can also be named as: Pc Turbo Pro, PcTurbo Pro.

2. PcTurboPro screen shot:

PcTurboPro

3. How to remove PcTurboPro:

  1. Internet connection might be disabled or Internet browser might be blocked by PcTurboPro, so it won't be possible to download any files to infected computer. In this case please download all files required for PcTurboPro removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove PcTurboPro download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove PcTurboPro.

  5. Restart the computer to complete PcTurboPro removal procedure.

4. PcTurboPro files:

ddesupport.dll, msdde.dll, msole.dll
atlserv.exe, avp.exe, mgrs.exe, pctp.exe, startmon.exe

5. Hijackthis entries:

O2 Entries:
O2 - BHO: MSVPS System - {100B21CD-3B97-44FB-B1C0-EA6249E482E8} - C:\WINDOWS\ddesupport.dll
O4 Entries:
O4 - HKLM\..\Run: [avp] C:\WINDOWS\avp.exe
O4 - HKLM\..\Run: [smgr] mgrs.exe
O4 - HKLM\..\Run: [PCTurboPro] C:\Program Files\PCTurboPro_Free\pctp.exe
O4 - HKCU\..\Run: [PCTurboPro] C:\Program Files\PCTurboPro_Free\pctp.exe
O4 - HKLM\..\Run: [pctp_check] "C:\Program Files\PCTurboPro_Free\startmon.exe"
O21 Entries:
O21 - SSODL: msdde - {7725C992-B6C9-42AC-ACF9-A00D6AA45166} - C:\WINDOWS\msdde.dll
O21 - SSODL: msole - {80047F31-5F13-47A4-ACFB-CC64BCCDDE75} - C:\WINDOWS\msole.dll
O23 Entries:
O23 - Service: StService (SServ) - Unknown owner - C:\Program Files\PCTurboPro_Free\AtlServ.exe