Type: Fake Security Programs
Malware Author: Unknown
Threat Level: High
Screenshot:

How to remove PrivacyCommander manually:
It's possible to remove PrivacyCommander manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.
The files to be deleted:
Privacy Commander.lnk
Uninstall.lnk
settings.ini
sysguard.exe
tipguard.exe
uninstall.exe
bg_fixed_de.jpg
bg_fixed_en.jpg
bg_fixed_es.jpg
bg_fixed_it.jpg
bg_licence_de.jpg
bg_licence_en.jpg
bg_licence_es.jpg
bg_licence_it.jpg
bg_main_de.jpg
bg_main_en.jpg
bg_main_es.jpg
bg_main_it.jpg
bg_warning_de.jpg
bg_warning_en.jpg
bg_warning_es.jpg
bg_warning_it.jpg
bt_activate_de.jpg
bt_activate_en.jpg
bt_activate_es.jpg
bt_activate_it.jpg
bt_cancel_de.jpg
bt_cancel_en.jpg
bt_cancel_es.jpg
bt_cancel_it.jpg
bt_fix_de.jpg
bt_fix_en.jpg
bt_fix_es.jpg
bt_fix_it.jpg
bt_ok_de.jpg
bt_ok_en.jpg
bt_ok_es.jpg
bt_ok_it.jpg
bt_silent_de.jpg
bt_silent_en.jpg
bt_silent_es.jpg
bt_silent_it.jpg
bt_upd_de.jpg
bt_upd_en.jpg
bt_upd_es.jpg
bt_upd_it.jpg
bt_update_de.jpg
bt_update_en.jpg
bt_update_es.jpg
bt_update_it.jpg
de.lng
en.lng
es.lng
it.lng
1.mp3
2.mp3
3.mp3
Remove registry entries:
HKEY_CURRENT_USER\Software\sysguard
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\sysguard
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “tipguard.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\
Winlogon “Shell”=> C:\Program Files\Privacy Commander\sysguard.exe
Please be careful because manual removal of PrivacyCommander may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.
No comments:
Post a Comment