Privacy Commander – Guida alla rimozione!

di | 04/12/2008

Privacy Commander è un falso software di sicurezza della stessa famiglia di SpyProtector e PC Defender 2008.

.

.

Il falso antivirus una volta infettato il pc, avvia false scansione facendo credere all’utente di avere il sistema infettato, invitandolo ad acquistare la licenza del falso antivirus per disinfettarsi.

Ovviamente non acquistate nulla!

I sintomi che presenta un pc rimasto vittima di Privacy Commander sono:

sistema rallentato, settaggi del browser modoficati, apertura continua di finestre pop-up durante la navigazione ed infine l’impossibilità in alcuni casi di collegarsi ad internet.

Questi sono i files creati dal falso antivirus:

c:\Documents and Settings\Bleeping\Desktop\Privacy Commander.lnk
c:\Documents and Settings\Bleeping\Start Menu\Programs\Privacy Commander
c:\Documents and Settings\Bleeping\Start Menu\Programs\Privacy Commander\Privacy Commander.lnk
c:\Documents and Settings\Bleeping\Start Menu\Programs\Privacy Commander\Uninstall.lnk
c:\Program Files\Privacy Commander
c:\Program Files\Privacy Commander\settings.ini
c:\Program Files\Privacy Commander\sysguard.exe
c:\Program Files\Privacy Commander\tipguard.exe
c:\Program Files\Privacy Commander\uninstall.exe
c:\Program Files\Privacy Commander\img
c:\Program Files\Privacy Commander\img\bg_fixed_de.jpg
c:\Program Files\Privacy Commander\img\bg_fixed_en.jpg
c:\Program Files\Privacy Commander\img\bg_fixed_es.jpg
c:\Program Files\Privacy Commander\img\bg_fixed_it.jpg
c:\Program Files\Privacy Commander\img\bg_licence_de.jpg
c:\Program Files\Privacy Commander\img\bg_licence_en.jpg
c:\Program Files\Privacy Commander\img\bg_licence_es.jpg
c:\Program Files\Privacy Commander\img\bg_licence_it.jpg
c:\Program Files\Privacy Commander\img\bg_main_de.jpg
c:\Program Files\Privacy Commander\img\bg_main_en.jpg
c:\Program Files\Privacy Commander\img\bg_main_es.jpg
c:\Program Files\Privacy Commander\img\bg_main_it.jpg
c:\Program Files\Privacy Commander\img\bg_warning_de.jpg
c:\Program Files\Privacy Commander\img\bg_warning_en.jpg
c:\Program Files\Privacy Commander\img\bg_warning_es.jpg
c:\Program Files\Privacy Commander\img\bg_warning_it.jpg
c:\Program Files\Privacy Commander\img\bt_activate_de.jpg
c:\Program Files\Privacy Commander\img\bt_activate_en.jpg
c:\Program Files\Privacy Commander\img\bt_activate_es.jpg
c:\Program Files\Privacy Commander\img\bt_activate_it.jpg
c:\Program Files\Privacy Commander\img\bt_cancel_de.jpg
c:\Program Files\Privacy Commander\img\bt_cancel_en.jpg
c:\Program Files\Privacy Commander\img\bt_cancel_es.jpg
c:\Program Files\Privacy Commander\img\bt_cancel_it.jpg
c:\Program Files\Privacy Commander\img\bt_fix_de.jpg
c:\Program Files\Privacy Commander\img\bt_fix_en.jpg
c:\Program Files\Privacy Commander\img\bt_fix_es.jpg
c:\Program Files\Privacy Commander\img\bt_fix_it.jpg
c:\Program Files\Privacy Commander\img\bt_ok_de.jpg
c:\Program Files\Privacy Commander\img\bt_ok_en.jpg
c:\Program Files\Privacy Commander\img\bt_ok_es.jpg
c:\Program Files\Privacy Commander\img\bt_ok_it.jpg
c:\Program Files\Privacy Commander\img\bt_silent_de.jpg
c:\Program Files\Privacy Commander\img\bt_silent_en.jpg
c:\Program Files\Privacy Commander\img\bt_silent_es.jpg
c:\Program Files\Privacy Commander\img\bt_silent_it.jpg
c:\Program Files\Privacy Commander\img\bt_upd_de.jpg
c:\Program Files\Privacy Commander\img\bt_upd_en.jpg
c:\Program Files\Privacy Commander\img\bt_upd_es.jpg
c:\Program Files\Privacy Commander\img\bt_upd_it.jpg
c:\Program Files\Privacy Commander\img\bt_update_de.jpg
c:\Program Files\Privacy Commander\img\bt_update_en.jpg
c:\Program Files\Privacy Commander\img\bt_update_es.jpg
c:\Program Files\Privacy Commander\img\bt_update_it.jpg
c:\Program Files\Privacy Commander\lang
c:\Program Files\Privacy Commander\lang\de.lng
c:\Program Files\Privacy Commander\lang\en.lng
c:\Program Files\Privacy Commander\lang\es.lng
c:\Program Files\Privacy Commander\lang\it.lng
c:\Program Files\Privacy Commander\sounds
c:\Program Files\Privacy Commander\sounds\1.mp3
c:\Program Files\Privacy Commander\sounds\2.mp3
c:\Program Files\Privacy Commander\sounds\3.mp3

Queste invece le chiavi di registro:

HKEY_CURRENT_USER\Software\sysguard
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysguard
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “tipguard.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell”=> C:\Program Files\Privacy Commander\sysguard.exe

Come disinfettarsi.

Il tool che si è dimostrato efficace nel rimuovere Privacy Commander è:

Malwarebytes Anti-Malware – Download

Disinfettarsi con Malwarebytes Anti-Malware

Scaricate Malwarebytes’ Anti-Malware sul desktop e procedete con l’installazione.

Avviate il software, procedete prima con l’update e successivamente effettuate una scansione in modalità “rapida” del sistema.

Selezionate tutti i malware scovati dal tool e cliccate su “Rimuovi selezionati”.

Ottenuto conferma che tutti i malware sono stati eliminati, potete chiudere il programma e riavviare il sistema.

In alternativa, risulta altrettanto efficace una scansione in modalità provvisoria con A-Square 4 scaricabile quì.