Easy PC Firewall

Last Updated on Thursday, 06 September 2012 18:20 Tuesday, 23 August 2011 14:34

A rogue/ fake program by the name Easy PC Firewall is affecting the computers running on the Microsoft windows operating systems. It's analysis report is given below

Files and folders found - view
%DesktopDir%\Download FREE Antivirus.lnk
%DesktopDir%\Easy PC Firewall.lnk
%DesktopDir%\FREE Dating Network.lnk
%Programs%\Easy PC Firewall FREEWARE\Check for updates.lnk
%Programs%\Easy PC Firewall FREEWARE\Download FREE Antivirus.lnk
%Programs%\Easy PC Firewall FREEWARE\Easy PC Firewall.lnk
C:\Program Files\Easy PC Firewall\asycfilt.dll
C:\Program Files\Easy PC Firewall\Chinese Dating Network.url
C:\Program Files\Easy PC Firewall\chinesedating.ico
C:\Program Files\Easy PC Firewall\comcat.dll
C:\Program Files\Easy PC Firewall\COMCT332.OCX
C:\Program Files\Easy PC Firewall\COMCTL32.OCX
C:\Program Files\Easy PC Firewall\COMDLG32.OCX
C:\Program Files\Easy PC Firewall\default.pml
C:\Program Files\Easy PC Firewall\defaultpb.pbl
C:\Program Files\Easy PC Firewall\Download FREE Antivirus.url
C:\Program Files\Easy PC Firewall\Easy PC Firewall.exe
C:\Program Files\Easy PC Firewall\easypcfirewallstartup.exe
C:\Program Files\Easy PC Firewall\firewall2.ico
C:\Program Files\Easy PC Firewall\kaspersky.ico
C:\Program Files\Easy PC Firewall\license.txt
C:\Program Files\Easy PC Firewall\MSCOMCT2.OCX
C:\Program Files\Easy PC Firewall\MSCOMCTL.OCX
C:\Program Files\Easy PC Firewall\MSINET.OCX
C:\Program Files\Easy PC Firewall\msvbvm60.dll
C:\Program Files\Easy PC Firewall\MSWINSCK.OCX
C:\Program Files\Easy PC Firewall\oleaut32.dll
C:\Program Files\Easy PC Firewall\olepro32.dll
C:\Program Files\Easy PC Firewall\processfirewall.exe
C:\Program Files\Easy PC Firewall\processkiller.exe
C:\Program Files\Easy PC Firewall\readme.txt
C:\Program Files\Easy PC Firewall\restoreconfig.exe
C:\Program Files\Easy PC Firewall\RICHTX32.OCX
C:\Program Files\Easy PC Firewall\scrrun.dll
C:\Program Files\Easy PC Firewall\settings.ini
C:\Program Files\Easy PC Firewall\startup.exe
C:\Program Files\Easy PC Firewall\stdole2.tlb
C:\Program Files\Easy PC Firewall\Uninstall.exe
C:\Program Files\Easy PC Firewall\Uninstall.ini
C:\Program Files\Easy PC Firewall\updates.exe

Folders
%Programs%\Easy PC Firewall FREEWARE
C:\Program Files\Easy PC Firewall

(Full path for the short folder names)

There may be more files created by this rogue program. You can find them out. First locate and note down the "date of creation" of any of the files mentioned above, and after that, search the hard disk for other files created on that date or onward. See image

Necessary steps required to remove this rogue program

To remove processes created by the rogue program from the Task Manager
To search and delete files created by the rogue program from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise files created by the rogue program inside the hidden folders will not be found
To remove obsolete registry keys using CCleaner

Detailed instructions and free Tools

Preventive steps to avoid rogue programs

Reprinted with permission from Threatexpert.com

Disclaimer

Vocabulary of the technical terms used in this article