Dec 4, 2008

Remove PrivacyCommander - PrivacyCommander Removal Instructions

PrivacyCommander is often downloaded by Trojan Horse ( Zlob, Vundo) or through web browser security holes. When PrivacyCommander get in touch with your system it will generate numerous pop-ups, fake security alerts which will state that your computer is seriously infected and your data and privacy is in danger. Also PrivacyCommander will perform system scan and “find” another proof of infection. Remember that PrivacyCommander can mark some important system files as infections. PrivacyCommander is trying to convince computer users to register PrivacyCommander for about 50$. We recommend to download Spyware Doctor with antivirus to get rid of this useless software.

Type: Fake Security Programs
Malware Author: Unknown
Threat Level: High

Screenshot:



How to remove PrivacyCommander manually:
It's possible to remove PrivacyCommander manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

Privacy Commander.lnk
Uninstall.lnk
settings.ini
sysguard.exe
tipguard.exe
uninstall.exe
bg_fixed_de.jpg
bg_fixed_en.jpg
bg_fixed_es.jpg
bg_fixed_it.jpg
bg_licence_de.jpg
bg_licence_en.jpg
bg_licence_es.jpg
bg_licence_it.jpg
bg_main_de.jpg
bg_main_en.jpg
bg_main_es.jpg
bg_main_it.jpg
bg_warning_de.jpg
bg_warning_en.jpg
bg_warning_es.jpg
bg_warning_it.jpg
bt_activate_de.jpg
bt_activate_en.jpg
bt_activate_es.jpg
bt_activate_it.jpg
bt_cancel_de.jpg
bt_cancel_en.jpg
bt_cancel_es.jpg
bt_cancel_it.jpg
bt_fix_de.jpg
bt_fix_en.jpg
bt_fix_es.jpg
bt_fix_it.jpg
bt_ok_de.jpg
bt_ok_en.jpg
bt_ok_es.jpg
bt_ok_it.jpg
bt_silent_de.jpg
bt_silent_en.jpg
bt_silent_es.jpg
bt_silent_it.jpg
bt_upd_de.jpg
bt_upd_en.jpg
bt_upd_es.jpg
bt_upd_it.jpg
bt_update_de.jpg
bt_update_en.jpg
bt_update_es.jpg
bt_update_it.jpg
de.lng
en.lng
es.lng
it.lng
1.mp3
2.mp3
3.mp3


Remove registry entries:

HKEY_CURRENT_USER\Software\sysguard
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\sysguard
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “tipguard.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\
Winlogon “Shell”=> C:\Program Files\Privacy Commander\sysguard.exe

Please be careful because manual removal of PrivacyCommander may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

No comments:

/