PCPrivacy Defender is a rogue privacy software that uses fake alerts and false privacy risks to trick you into buying the software. The rogue privacy program is distributed through the use fake online malware scanners that tells you that your computer has a variety of privacy risks and that you must install PCPrivacy Defender to protect your computer.
During installation, PCPrivacy Defender is set to start automatically when your computer starts. Immediately after launch, PCPrivacy Defender starts scanning the computer and list a variety of privacy risks on your computer to trick you to buy the paid version of the rogue.
Computer users are urged to avoid purchasing this bogus program! The rogue privacy program can be safely removed from your computer along with any other malware infections if the proper steps are taken. If you are a non-techie computer user then this method of removing PCPrivacy Defender and any associated malware from your computer is for you.
Symptoms in a HijackThis Log
O4 – HKLM\..\Run: [PCPrivacyDefender Freeware] “C:\Program Files\PCPrivacyDefender Freeware\UPSPDAP.exe” /min
Use the following instructions to remove PCPrivacy Defender (Uninstall guide)
Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.
Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded you will see window similar to the one below.
Malwarebytes Anti-Malware Window
Select “Perform Quick Scan”, then click Scan. The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.
Malwarebytes Anti-malware, list of infected items
Make sure that everything is checked, and click Remove Selected. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.
Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.
PCPrivacy Defender creates the following files and folders
C:\Program Files\PCPrivacyDefender Freeware
C:\Program Files\PCPrivacyDefender Freeware\Appbase
C:\Documents and Settings\All Users\Application Data\PCPrivacyDefender Freeware
C:\Documents and Settings\All Users\Application Data\PCPrivacyDefender Freeware\Data
C:\Documents and Settings\All Users\Start Menu\Programs\PCPrivacyDefender Freeware
C:\Program Files\PCPrivacyDefender Freeware\UPSPDAP.exe
C:\Program Files\PCPrivacyDefender Freeware\activate.dat
C:\Program Files\PCPrivacyDefender Freeware\ATL80.dll
C:\Program Files\PCPrivacyDefender Freeware\AV.dat
C:\Program Files\PCPrivacyDefender Freeware\bnlink.dat
C:\Program Files\PCPrivacyDefender Freeware\lapv.dat
C:\Program Files\PCPrivacyDefender Freeware\license.rtf
C:\Program Files\PCPrivacyDefender Freeware\mfc80.dll
C:\Program Files\PCPrivacyDefender Freeware\Microsoft.VC80.ATL.manifest
C:\Program Files\PCPrivacyDefender Freeware\Microsoft.VC80.CRT.manifest
C:\Program Files\PCPrivacyDefender Freeware\Microsoft.VC80.MFC.manifest
C:\Program Files\PCPrivacyDefender Freeware\msvcp80.dll
C:\Program Files\PCPrivacyDefender Freeware\msvcr80.dll
C:\Program Files\PCPrivacyDefender Freeware\PP.exe
C:\Program Files\PCPrivacyDefender Freeware\pv.dat
C:\Program Files\PCPrivacyDefender Freeware\readme.rtf
C:\Program Files\PCPrivacyDefender Freeware\remnag.dat
C:\Program Files\PCPrivacyDefender Freeware\ScanReport.dat
C:\Program Files\PCPrivacyDefender Freeware\Schedule.dat
C:\Program Files\PCPrivacyDefender Freeware\softwaredetect.dat
C:\Program Files\PCPrivacyDefender Freeware\unins000.dat
C:\Program Files\PCPrivacyDefender Freeware\unins000.exe
C:\Program Files\PCPrivacyDefender Freeware\uninstall.ico
C:\Program Files\PCPrivacyDefender Freeware\up.dat
C:\Program Files\PCPrivacyDefender Freeware\updater.dat
C:\Program Files\PCPrivacyDefender Freeware\UPSPDAP.url
C:\Program Files\PCPrivacyDefender Freeware\UPSPDAP.xml
C:\Program Files\PCPrivacyDefender Freeware\UserAgent.dll
C:\Program Files\PCPrivacyDefender Freeware\vbpv.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\AE_CD_Cr.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\AReadr4.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\AReadr5.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\ASDSEEpv.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\ASPack.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\Babylon.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\BDelphi5.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\CatchUp.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\CBuildr5.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\CCGA.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\CManager.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\CuteFTP4.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\CuteHTML.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\DAcceler.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\DiscJug.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\ECDCreat4.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\Far.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\FFTsks.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\FlashFXP.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\FrntPage.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\FrontPEx.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\FtpEXP.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\FtpVoya.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\GetRight.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\GoZilla.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\GravMRU.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\HomeSite.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\HotDogPr.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\H_TxtPad.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\IconExtr.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\iMesh.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\ImgReady3.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\InsShExp.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\JASC_P_P.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\KaZaA.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\LView.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MacDir.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MacDrWea.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MicAng.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MicDes.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MMUnDisk.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MM_CON.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\Morpheus.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MPaint.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MPicPub.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MPImaGal.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MSExplorer.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MSoffice.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MSRegEdit.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MSWMP.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\MSWordPad.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\Nero.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\NetShow.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\NTBackup.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\pfilelst.xda
C:\Program Files\PCPrivacyDefender Freeware\Appbase\PhotShel.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\PHPCoder.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\PowerZIP.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\RapidBr.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\RealAuPl.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\RealDown.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\SecurCRT.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\SL_BlWin.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\SmartClr.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\Sonique.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\StuffIt.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\TelepPro.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\UGifAnim.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\UltraEd.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\UMedStud.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\UPhImpV.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\UPhotoEx.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\UVidStud.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\VNC.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\WebFeret.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\WebReap.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\WinACE.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\WinGate.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\WinRAR.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\WinZIP.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\WiseInst.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\wordslst.xda
C:\Program Files\PCPrivacyDefender Freeware\Appbase\YahooPl.dat
C:\Program Files\PCPrivacyDefender Freeware\Appbase\ZipMagic.dat
C:\Documents and Settings\All Users\Application Data\PCPrivacyDefender Freeware\Data\ActivationCode
C:\Documents and Settings\All Users\Start Menu\Programs\PCPrivacyDefender Freeware\PCPrivacyDefender Freeware.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\PCPrivacyDefender Freeware\PCPrivacyDefender HomePage.url
C:\Documents and Settings\All Users\Start Menu\Programs\PCPrivacyDefender Freeware\Uninstall PCPrivacyDefender.lnk
PCPrivacy Defender creates the following registry keys and values
HKEY_LOCAL_MACHINE\SOFTWARE\cleaner2009 freeware
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\UPSPDAP_install_is1
HKEY_CURRENT_USER\SOFTWARE\PCPrivacyDefender Freeware
HKEY_LOCAL_MACHINE\SOFTWARE\PCPrivacyDefender Freeware
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\pcprivacydefender freeware
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files\PCPrivacyDefender Freeware\ATL80.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files\PCPrivacyDefender Freeware\mfc80.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files\PCPrivacyDefender Freeware\msvcp80.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files\PCPrivacyDefender Freeware\msvcr80.dll
