Click on screenshot to zoom
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Blocks internet connection
  • Block exe files from running
  • Installs itself without permissions
  • Changes background
  • Connects to the internet without permission
  • Shows commercial adverts
  • Normal system programs crash immediatelly
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

PC Repair

It is not difficult to see that the innovation and sophistication behind rogue applications are constantly being revolutionized, as in the case of PC Repair. This rogue PC defragmenter and optimization application clearly derives from the same family of hated rogueware as FakeHDD. The purpose behind PC Repair is simple – it was created to steal your money. It will only pretend to be able to identify and fix system errors and problems, but in reality PC Repair has no ability or intent to do any such thing. Its only purpose is to use fake notifications and messages to swindle PC owners out of their money.

Download Spyware Removal Tool to Remove* PC Repair
  • Quick & tested solution for PC Repair removal.
  • 100% Free Scan for Windows

This rogue application is installed on its victims’ PCs through a variety of nefarious ways. These may range from using bogus online malware scanners to employing seditious browser hijacking websites. These browser hijackers forcefully redirect users’ browsing and search sessions to compromised landing pages. These compromised landing pages employ drive-by download tactics which exploit PCs’ vulnerabilities and thus manage to successfully root the PC Repair infection into the PC.

Once PC Repair is successfully rooted into the PC it will start its attack. This will be heralded by PC Repair initiating a fake system scan each time the user logs on to Windows. The fake system scan will yield various fake results which will inform the user that his system is suffering from numerous crippling errors, and that PC Repair has the ability to fix these errors, which it really does not.

Shortly after this fake scan finishes the user will be spammed with incessant and rubbish fake alerts in the form of pop up messages. These fake pop up messages will contain error messages which does not make sense in the least. Some of the more popular fake alerts to be on the lookout for include the following:

Critical Error
Hard Drive not found. Missing hard drive.

Critical Error
RAM memory usage is critically high. RAM memory failure.

Critical Error
Windows can't find hard disk space. Hard drive error

It is clear from the contents of the above fake alerts that PC Repair is a rubbish application – some of the error messages claim that the Hard Drive is missing – this is not possible as the system would not be able to operate is such an event.

As a further attack on the system PC Repair will prevent the user from running any applications on the system. Each time the user attempts to launch an application PC Repair will terminate the program and inform the user that the Hard Drive is corrupted. It does this in an attempt to further annoy and panic the user, but also to prevent the user from running an application which may be able to detect and remove PC Repair from the system. The error messages the user will receive each time an application is launched are:

Hard Drive Failure
The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system.

System Error
An error occurred while reading system files. Run a system diagnostic utility to check your hard disk drive for errors.

Critical Error
Hard drive critical error. Run a system diagnostic utility to check your hard disk drive for errors. Windows can't find hard disk space. Hard drive error.

After the user closes the above fake alerts, PC Repair will generate another fake alert which purports to be able to fix the hard drive:

Fix Disk
PC Repair Diagnostics will scan the system to identify performance problems.
Start or Cancel

If the user clicks on this call to action PC Repair will pretend to scan the PC and once again try to convince the user to buy PC Repair’s software.

This rogue has no interest in optimizing the system, PC Repair simply wants to steal your money while leaving you with nothing of value in return. In order to limit the damage this rogue application will cause to your system, destroy PC Repair with the help of a genuine security tool. This will not only get rid of PC Repair effectively but also protect your PC against similar attacks in future.

Download Spyware Removal Tool to Remove* PC Repair
  • Quick & tested solution for PC Repair removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove PC Repair

Files associated with PC Repair infection:

PC Repair.lnk
Uninstall PC Repair.lnk
WdPGjGBlKKkE.exe
qdPWjqKGBlHCkE.exe
qdPGjGBlHCkE.exe
P1kAlMiG2Kb7Fz.exe
L6kAlMiKb7Fz.exe
%UserProfile%\Desktop\PC Repair.lnk
%Temp%\smtmp\4
%Temp%\smtmp\3
%Temp%\smtmp\2
%Temp%\smtmp\1
%Temp%\smtmp\
%StartMenu%\Programs\PC Repair\Uninstall PC Repair.lnk
%StartMenu%\Programs\PC Repair\PC Repair.lnk
%StartMenu%\Programs\PC Repair\
%LocalAppData%\[random].exe
%LocalAppData%\[random]

PC Repair processes to kill:

WdPGjGBlKKkE.exe
qdPWjqKGBlHCkE.exe
qdPGjGBlHCkE.exe
P1kAlMiG2Kb7Fz.exe
L6kAlMiKb7Fz.exe
%LocalAppData%\[random].exe

Remove PC Repair registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'Yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "Hidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced "ShowSuperHidden" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU "MRUList"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "CertificateRevocation" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop "NoChangingWallPaper" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "NoDesktop" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = '1'
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.