PCKeeper and PCKeeper AntiVirus?

[LazyLion]

How does this crapware keep getting onto my client's computers?

I've seen three infections now, and none of them can remember asking for it or installing it.

When I check the downloads folder, there are usually more than one download of it... meaning that something is triggering it to download.
I assume then that it must self-activate and my users then in their ignorance are allowing the installation to go ahead.

It install a program called PCKeeper and then also a PCKeeper AntiVirus which then immediately pops up with a bright red warning screen about some malware that it has supposedly found.
Of course it wants you then to buy the full version....

I found this...
https://en.wikipedia.org/wiki/PCKeeper
http://www.howtogeek.com/forum/topic/what-is-pckeeper-is-it-legit

 

[Jet-Fighter7700]

infected mails with zip files in them?

maybe even USB sticks with funny software on therm.....

 

[SinghDude]

probably click bait....

what AV are you running ?


Do you have adblock installed on clients PC ?

 

[LazyLion]

probably click bait....

what AV are you running ?


Do you have adblock installed on clients PC ?

No. No ad block. Running Mse

 

[supersunbird]

They don't pay attention and just clicked yes on some popup. They will not admit such a boo boo.

 

[klipdrifter]

How does this crapware keep getting onto my client's computers?

I've seen three infections now, and none of them can remember asking for it or installing it.

When I check the downloads folder, there are usually more than one download of it... meaning that something is triggering it to download.
I assume then that it must self-activate and my users then in their ignorance are allowing the installation to go ahead.

It install a program called PCKeeper and then also a PCKeeper AntiVirus which then immediately pops up with a bright red warning screen about some malware that it has supposedly found.
Of course it wants you then to buy the full version....

I found this...
https://en.wikipedia.org/wiki/PCKeeper
http://www.howtogeek.com/forum/topic/what-is-pckeeper-is-it-legit

Hi

This crapware comes from those popups that say "YOUR MACHINE IS INFECTED!!! CLICK HERE TO REMOVE" etc. I think you should consider installing ad blockers for your clients. Most browsers have free extensions / add-ons and they work like a charm. If your clients are easily fooled by these popups they probably won't even notice the ad blocker being installed...

My 2 cents

 

[LazyLion]

Hi

This crapware comes from those popups that say "YOUR MACHINE IS INFECTED!!! CLICK HERE TO REMOVE" etc. I think you should consider installing ad blockers for your clients. Most browsers have free extensions / add-ons and they work like a charm. If your clients are easily fooled by these popups they probably won't even notice the ad blocker being installed...

My 2 cents

Thanks ,that is what I suspected!

 

[SinghDude]

Problem i have noticed recently is that some sites rely heavily on ad revenue and prompt to disable adblock. If clients are not IT-savy there is a good chance they will inadvertently disable it and once again leaving them open to vulnerability.


MSE is pretty handy, however it will not prevent clients from clicking on pop-ups .....


Good luck Gary

 

[backstreetboy]

Windows 10 and local account...

 

[klipdrifter]

Problem i have noticed recently is that some sites rely heavily on ad revenue and prompt to disable adblock. If clients are not IT-savy there is a good chance they will inadvertently disable it and once again leaving them open to vulnerability.


MSE is pretty handy, however it will not prevent clients from clicking on pop-ups .....


Good luck Gary

Yes I am also seeing an increase with this on websites, but I have also seen that the ad blockers allow "non intrusive" ads to be displayed. So I am not sure if this is suppose to make certain websites open up although they don't allow ad blockers.

I personally believe a change is coming...

 

[SinghDude]

Yes I am also seeing an increase with this on websites, but I have also seen that the ad blockers allow "non intrusive" ads to be displayed. So I am not sure if this is suppose to make certain websites open up although they don't allow ad blockers.

I personally believe a change is coming...

Ad-block can be configured to allow sites.

Whitelist/Blacklist available.