Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for Privacy Reviver

- - - - -
Started by Metallica , Sep 01 2017 05:11 AM
reviversoft

  • Please log in to reply
No replies to this topic

#1
Metallica
Posted 01 September 2017 - 05:11 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is Privacy Reviver?

The Malwarebytes research team has determined that Privacy Reviver is a "system optimizer". These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
More information can be found on our Malwarebytes Labs blog.

How do I know if I am infected with Privacy Reviver?

This is how the main screen of the sytem optimizer looks:

main.png

You will find these icons in your taskbar, your startmenu, and on your desktop:

icons.png

and see this type of warnings during install:

warning1.png

warning5.png

and this screen when you try to fix the found "problems":

warning6.png

You may see this entry in your list of installed programs:

warning4.png

and these tasks in your list of Scheduled Tasks:

warning3.png

How did Privacy Reviver get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was downloaded from their site.

website.png

How do I remove Privacy Reviver?

Our program Malwarebytes can detect and remove this potentially unwanted application.
  • Please download Malwarebytes to your desktop.
  • Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
  • Then click Finish.
  • Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
  • If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Privacy Reviver?
  • No, Malwarebytes removes Privacy Reviver completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this system optimizer.

As you can see below the full version of Malwarebytes would have protected you against the Privacy Reviver installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png


and we block access to their domain:

protection2.png


Technical details for experts

You may see these entries in FRST logs:

 () C:\Program Files\ReviverSoft\Smart Monitor\ReviverSoft Smart Monitor Service.exe
 (Privacy Reviver) C:\Program Files (x86)\Privacy Reviver\PrivacyReviver.exe
 (Corel Corporation) C:\Program Files\ReviverSoft\Smart Monitor\ReviverSoftSmartMonitor.exe
 HKCU\...\Run: [PrivacyReviver] => C:\Program Files (x86)\Privacy Reviver\PrivacyReviver.exe [9551712 2017-07-24] (Privacy Reviver)
 R2 ReviverSoft Smart Monitor Service; C:\Program Files\ReviverSoft\Smart Monitor\ReviverSoft Smart Monitor Service.exe [495872 2017-07-21] ()
 C:\Windows\System32\Tasks\PrivacyReviver_Popup3
 C:\Users\{username}\AppData\Local\PrivacyReviver
 C:\Windows\System32\Tasks\PrivacyReviver_Popup
 C:\ProgramData\ReviverSoft
 C:\Windows\System32\Tasks\ReviverSoft_PrivacyReviver_Daily
 C:\Windows\System32\Tasks\PrivacyReviver_Master
 C:\Users\{username}\Desktop\Privacy Reviver.lnk
 C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Privacy Reviver
 C:\Program Files\ReviverSoft
 C:\Program Files (x86)\Privacy Reviver

Privacy Reviver (HKLM\...\{F4844364-CF98-4050-815D-54466DB7D7C9}) (Version: 3.4.0.0 - Corel Corporation)
Task: {16E02FB5-D9EC-4E22-A229-EBEC52D0FB30} - System32\Tasks\ReviverSoft_PrivacyReviver_Daily => C:\ProgramData\ReviverSoft\Privacy Reviver\notifier.exe [2017-07-26] (ReviverSoft)
Task: {B6E38965-1F6E-4C8E-9720-E3C8D909690A} - System32\Tasks\PrivacyReviver_Master => C:\Program Files (x86)\Privacy Reviver\InstAct.exe [2017-07-24] ()
Task: {BC34FE59-985A-4C32-AC71-D255C4D09D40} - System32\Tasks\PrivacyReviver_Popup => C:\Program Files (x86)\Privacy Reviver\PrivacyReviver.exe [2017-07-24] (Privacy Reviver)
Task: {F97C78EB-5AFC-43A1-B511-61A75BBCD3FE} - System32\Tasks\PrivacyReviver_Popup3 => C:\Program Files (x86)\Privacy Reviver\PrivacyReviver.exe [2017-07-24] (Privacy Reviver)
The most significant alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files\ReviverSoft\Smart Monitor
       Adds the file apps"="7/21/2017 12:58 PM, 4432 bytes, A
       Adds the file msvcp100.dll"="5/11/2016 6:02 PM, 608080 bytes, A
       Adds the file msvcr100.dll"="5/11/2016 6:02 PM, 829264 bytes, A
       Adds the file ReviverSoft Smart Monitor Service.exe"="7/21/2017 1:14 PM, 495872 bytes, A
       Adds the file ReviverSoft Smart Monitor Service.mab"="7/21/2017 1:14 PM, 161887 bytes, A
       Adds the file ReviverSoftSmartMonitor.exe"="7/21/2017 1:14 PM, 2118400 bytes, A
       Adds the file ReviverSoftSmartMonitor.mab"="7/21/2017 1:14 PM, 698597 bytes, A
       Adds the file SystemInfo-vc100-mt.dll"="7/21/2017 1:14 PM, 2227456 bytes, A
       Adds the file SystemInfo-vc100-mt.mab"="7/21/2017 1:14 PM, 979882 bytes, A
       Adds the file Uninstall.exe"="7/21/2017 1:14 PM, 183928 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Reviver
       Adds the file Esent.Interop.dll"="11/19/2015 2:16 PM, 326656 bytes, A
       Adds the file InstAct.exe"="7/24/2017 8:47 AM, 35168 bytes, A
       Adds the file InstAct.exe.config"="8/20/2015 12:34 PM, 232 bytes, A
       Adds the file Microsoft.Win32.TaskScheduler.dll"="11/19/2015 2:16 PM, 322560 bytes, A
       Adds the file Newtonsoft.Json.dll"="11/19/2015 2:16 PM, 494080 bytes, A
       Adds the file PrivacyEngine.dll"="7/24/2017 8:44 AM, 130560 bytes, A
       Adds the file PrivacyEngine.dll.config"="11/19/2015 2:16 PM, 229 bytes, A
       Adds the file PrivacyReviver.exe"="7/24/2017 8:46 AM, 9551712 bytes, A
       Adds the file PrivacyReviver.exe.config"="11/19/2015 2:16 PM, 231 bytes, A
       Adds the file Push.exe"="7/24/2017 8:47 AM, 24928 bytes, A
       Adds the file Push.exe.config"="12/12/2016 7:24 AM, 224 bytes, A
       Adds the file schedc.exe"="7/24/2017 8:46 AM, 29536 bytes, A
       Adds the file schedc.exe.config"="11/19/2015 2:16 PM, 232 bytes, A
       Adds the file schedc10.exe"="7/24/2017 8:46 AM, 32096 bytes, A
       Adds the file schedc10.exe.config"="11/19/2015 2:16 PM, 232 bytes, A
       Adds the file Setup.dll"="7/24/2017 8:44 AM, 77824 bytes, A
       Adds the file Setup.dll.config"="8/18/2015 7:10 AM, 229 bytes, A
       Adds the file System.Data.SQLite.dll"="11/19/2015 2:16 PM, 1175552 bytes, A
       Adds the file TaskTools.exe"="7/24/2017 8:46 AM, 63840 bytes, A
       Adds the file TaskTools.exe.config"="11/19/2015 2:16 PM, 231 bytes, A
       Adds the file uninstall.exe"="7/24/2017 8:47 AM, 198736 bytes, A
       Adds the file updater.exe"="7/24/2017 8:46 AM, 506720 bytes, A
       Adds the file updater.ini"="9/1/2017 11:51 AM, 381 bytes, A
       Adds the file Util.dll"="7/24/2017 8:44 AM, 235520 bytes, A
    Adds the folder C:\ProgramData\ReviverSoft\Privacy Reviver
       Adds the file notifier.exe"="7/26/2017 10:03 AM, 2592512 bytes, A
       Adds the file tray.exe"="7/26/2017 10:03 AM, 2571520 bytes, A
       Adds the file Uninst.exe"="7/26/2017 10:03 AM, 288528 bytes, A
    Adds the folder C:\ProgramData\ReviverSoft\Smart Monitor\{userID}
       Adds the file settings.data"="9/1/2017 11:52 AM, 674 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\PrivacyReviver
       Adds the file chcookies.txt"="9/1/2017 11:51 AM, 5768 bytes, A
       Adds the file debug.log"="9/1/2017 11:52 AM, 2310 bytes, A
       Adds the file ffcookies.txt"="9/1/2017 11:51 AM, 6812 bytes, A
       Adds the file iecookies.txt"="9/1/2017 11:51 AM, 26224 bytes, A
       Adds the file log.rtf"="9/1/2017 11:53 AM, 1291 bytes, A
       Adds the file lsttick"="9/1/2017 11:51 AM, 8 bytes, A
       Adds the file PrivacyReviver.settings"="9/1/2017 11:53 AM, 1864 bytes, A
       Adds the file report.txt"="9/1/2017 11:53 AM, 92 bytes, A
       Adds the file wndstate.tmp"="9/1/2017 11:51 AM, 5 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Privacy Reviver
       Adds the file Privacy Reviver.lnk"="9/1/2017 11:51 AM, 1122 bytes, A
    In the existing folder C:\Users\{username}\Desktop
       Adds the file Privacy Reviver.lnk"="9/1/2017 11:51 AM, 1086 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file PrivacyReviver_Master"="9/1/2017 11:51 AM, 3020 bytes, A
       Adds the file PrivacyReviver_Popup"="9/1/2017 11:52 AM, 3490 bytes, A
       Adds the file PrivacyReviver_Popup3"="9/1/2017 11:53 AM, 3756 bytes, A
       Adds the file ReviverSoft_PrivacyReviver_Daily"="9/1/2017 11:51 AM, 3684 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{2A2423AE-1AD9-4B60-A021-BBD75766C2FD}]
       "(Default)"="REG_SZ", "ReviverSoft Smart Monitor Service"
       "LocalService"="REG_SZ", "ReviverSoft Smart Monitor Service"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ReviverSoft Smart Monitor Service.exe]
       "AppID"="REG_SZ", "{2A2423AE-1AD9-4B60-A021-BBD75766C2FD}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\PrivacyReviver.exe]
       "(Default)"="REG_SZ", "C:\Program Files (x86)\Privacy Reviver\PrivacyReviver.exe"
       "Path"="REG_SZ", "C:\Program Files (x86)\Privacy Reviver"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F4844364-CF98-4050-815D-54466DB7D7C9}]
       "BID"="REG_SZ", "0"
       "DisplayIcon"="REG_SZ", "C:\ProgramData\ReviverSoft\Privacy Reviver\Uninst.exe"
       "DisplayName"="REG_SZ", "Privacy Reviver"
       "DisplayVersion"="REG_SZ", "3.4.0.0"
       "InstallLocation"="REG_SZ", "C:\Program Files (x86)\Privacy Reviver"
       "InstallPath"="REG_SZ", "C:\Program Files (x86)\Privacy Reviver"
       "MajorVersion"="REG_DWORD", 3
       "MinorVersion"="REG_DWORD", 4
       "Publisher"="REG_SZ", "Corel Corporation"
       "TID"="REG_SZ", ""
       "UninstallString"="REG_SZ", "C:\ProgramData\ReviverSoft\Privacy Reviver\Uninst.exe"
       "URLInfoAbout"="REG_SZ", "https://www.reviversoft.com/support/privacy-reviver"
       "VersionMajor"="REG_DWORD", 3
       "VersionMinor"="REG_DWORD", 4
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Privacy Reviver]
       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Privacy Reviver\PrivacyReviver.exe"
       "DisplayVersion"="REG_SZ", "3.4.0"
       "EstimatedSize"="REG_DWORD", 13204
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "Privacy Reviver"
       "QuietUninstallString"="REG_SZ", "C:\Program Files (x86)\Privacy Reviver\uninstall.exe /S"
       "SoftwareName"="REG_SZ", "Privacy Reviver"
       "UninstallString"="REG_SZ", "C:\Program Files (x86)\Privacy Reviver\uninstall.exe"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Privacy Reviver\Privacy Reviver]
       "Custom1"="REG_DWORD", 1
       "Custom2"="REG_DWORD", 1
       "Path"="REG_SZ", "C:\Program Files (x86)\Privacy Reviver"
       "ResName"="REG_SZ", "Silent"
       "Version"="REG_SZ", "3.4.0"
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ReviverSoft Smart Monitor Service]
       "DependOnService"="REG_MULTI_SZ, "RPCSS "
       "Description"="REG_SZ", "ReviverSoft Smart Monitor Service"
       "DisplayName"="REG_SZ", "ReviverSoft Smart Monitor Service"
       "ErrorControl"="REG_DWORD", 1
       "ImagePath"="REG_EXPAND_SZ, ""C:\Program Files\ReviverSoft\Smart Monitor\ReviverSoft Smart Monitor Service.exe""
       "ObjectName"="REG_SZ", "LocalSystem"
       "Start"="REG_DWORD", 2
       "Type"="REG_DWORD", 16
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
       "PrivacyReviver"="REG_SZ", ""C:\Program Files (x86)\Privacy Reviver\PrivacyReviver.exe" minimized"
    [HKEY_CURRENT_USER\Software\PrivacyReviverValidity]
       "Base"="REG_SZ", "Oracle CorporationBase Board0"
       "Bios"="REG_SZ", "innotek GmbHVirtualBox020061201000000.000000+000VBOX   - 1"
       "BuyLink"="REG_SZ", "http://goto.reviversoft.com/action/"
       "Cpu"="REG_SZ", "Intel(R) Core(TM) i7-4720HQ CPU @ 2.60GHz2594"
       "Disk"="REG_SZ", "VBOX HARDDISK ATA Device(Standard disk drives)2064909821255"
       "lang"="REG_SZ", "en"
       "NeedsRenewal"="REG_SZ", "False"
       "PhoneNum"="REG_SZ", ""
       "Rb"="REG_SZ", "EAAAAMjlWWCElpItczRYPZOgdxnco4TNANCQqupmVKXyACrd"
       "Reg"="REG_SZ", "EAAAAJ16hukkNra3evJ5ICOxzZ775SUeoRp0zuyUIubHRJSf"
       "Rti"="REG_SZ", "5696"
       "Ru"="REG_SZ", "EAAAADjF2zB+WchCa57OHzB+FOVkS1Io+rnr85jSgS9iNwgJkGeRxMbdmRnWd4IzehBWf50sqW78EODvhiOmbrIgK1o="
       "SplashTime"="REG_QWORD, ....
       "Support"="REG_SZ", "http://goto.reviversoft.com/action/"
Malwarebytes log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 9/1/17
Scan Time: 12:10 PM
Log File: be622e9b-8efd-11e7-b5f5-080027750297.json
Administrator: Yes

-Software Information-
Version: 3.2.2.2018
Components Version: 1.0.188
Update Package Version: 1.0.2701
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 317574
Threats Detected: 102
Threats Quarantined: 102
Time Elapsed: 2 min, 19 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 1
PUP.Optional.ReviverSoft, C:\PROGRAM FILES (X86)\PRIVACY REVIVER\PRIVACYREVIVER.EXE, Quarantined, [2838], [430456],1.0.2701

Module: 2
PUP.Optional.ReviverSoft, C:\PROGRAM FILES (X86)\PRIVACY REVIVER\PRIVACYREVIVER.EXE, Quarantined, [2838], [430456],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\System.Data.SQLite.dll, Quarantined, [2838], [430442],1.0.2701

Registry Key: 17
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\WOW6432NODE\Privacy Reviver, Delete-on-Reboot, [2838], [430451],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PrivacyReviver_Master, Delete-on-Reboot, [2838], [430449],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PrivacyReviver_Popup, Delete-on-Reboot, [2838], [430449],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Privacy Reviver, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F4844364-CF98-4050-815D-54466DB7D7C9}, Delete-on-Reboot, [2838], [430445],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PrivacyReviver_Popup3, Delete-on-Reboot, [2838], [430449],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{16E02FB5-D9EC-4E22-A229-EBEC52D0FB30}, Delete-on-Reboot, [2838], [430457],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{B6E38965-1F6E-4C8E-9720-E3C8D909690A}, Delete-on-Reboot, [2838], [430457],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{BC34FE59-985A-4C32-AC71-D255C4D09D40}, Delete-on-Reboot, [2838], [430457],1.0.2701
PUP.Optional.ReviverSoft, HKCU\SOFTWARE\PrivacyReviverValidity, Delete-on-Reboot, [2838], [430450],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{F97C78EB-5AFC-43A1-B511-61A75BBCD3FE}, Delete-on-Reboot, [2838], [430457],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ReviverSoft_PrivacyReviver_Daily, Delete-on-Reboot, [2838], [430449],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\PrivacyReviver.exe, Delete-on-Reboot, [2838], [430454],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\PrivacyReviver.exe, Delete-on-Reboot, [2838], [430454],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\CLASSES\APPID\{2A2423AE-1AD9-4B60-A021-BBD75766C2FD}, Delete-on-Reboot, [2838], [347964],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{2A2423AE-1AD9-4B60-A021-BBD75766C2FD}, Delete-on-Reboot, [2838], [347964],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{2A2423AE-1AD9-4B60-A021-BBD75766C2FD}, Delete-on-Reboot, [2838], [347964],1.0.2701

Registry Value: 5
PUP.Optional.ReviverSoft, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|PRIVACYREVIVER, Delete-on-Reboot, [2838], [430456],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{16E02FB5-D9EC-4E22-A229-EBEC52D0FB30}|PATH, Delete-on-Reboot, [2838], [430457],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{B6E38965-1F6E-4C8E-9720-E3C8D909690A}|PATH, Delete-on-Reboot, [2838], [430457],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{BC34FE59-985A-4C32-AC71-D255C4D09D40}|PATH, Delete-on-Reboot, [2838], [430457],1.0.2701
PUP.Optional.ReviverSoft, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{F97C78EB-5AFC-43A1-B511-61A75BBCD3FE}|PATH, Delete-on-Reboot, [2838], [430457],1.0.2701

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 19
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\fil-PH, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\se-FI, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\ar, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\da, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\de, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\es, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\fr, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\he, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\it, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\ja, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\nl, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\no, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\pt, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\ru, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\sv, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\PROGRAM FILES (X86)\PRIVACY REVIVER, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\PRIVACY REVIVER, Delete-on-Reboot, [2838], [430443],1.0.2701
PUP.Optional.ReviverSoft, C:\USERS\{username}\APPDATA\LOCAL\PRIVACYREVIVER, Delete-on-Reboot, [2838], [430444],1.0.2701
PUP.Optional.ReviverSoft, C:\PROGRAMDATA\REVIVERSOFT\PRIVACY REVIVER, Delete-on-Reboot, [2838], [430445],1.0.2701

File: 58
PUP.Optional.ReviverSoft, C:\USERS\{username}\DESKTOP\PRIVACY REVIVER.LNK, Delete-on-Reboot, [2838], [430446],1.0.2701
PUP.Optional.ReviverSoft, C:\WINDOWS\SYSTEM32\TASKS\PrivacyReviver_Master, Delete-on-Reboot, [2838], [430448],1.0.2701
PUP.Optional.ReviverSoft, C:\WINDOWS\SYSTEM32\TASKS\PrivacyReviver_Popup, Delete-on-Reboot, [2838], [430448],1.0.2701
PUP.Optional.ReviverSoft, C:\WINDOWS\SYSTEM32\TASKS\PrivacyReviver_Popup3, Delete-on-Reboot, [2838], [430448],1.0.2701
PUP.Optional.ReviverSoft, C:\WINDOWS\SYSTEM32\TASKS\ReviverSoft_PrivacyReviver_Daily, Delete-on-Reboot, [2838], [430448],1.0.2701
PUP.Optional.ReviverSoft, C:\PROGRAM FILES (X86)\PRIVACY REVIVER\PRIVACYREVIVER.EXE, Delete-on-Reboot, [2838], [430456],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\ar\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\da\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\de\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\es\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\fil-PH\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\fr\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\he\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\it\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\ja\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\nl\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\no\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\pt\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\ru\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\se-FI\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\sv\PrivacyReviver.resources.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\Esent.Interop.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\InstAct.exe, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\InstAct.exe.config, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\Microsoft.Win32.TaskScheduler.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\Newtonsoft.Json.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\PrivacyEngine.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\PrivacyEngine.dll.config, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\PrivacyReviver.exe.config, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\Push.exe, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\Push.exe.config, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\schedc.exe, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\schedc.exe.config, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\schedc10.exe, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\schedc10.exe.config, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\Setup.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\Setup.dll.config, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\System.Data.SQLite.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\TaskTools.exe, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\TaskTools.exe.config, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\uninstall.exe, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\updater.exe, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\updater.ini, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Program Files (x86)\Privacy Reviver\Util.dll, Delete-on-Reboot, [2838], [430442],1.0.2701
PUP.Optional.ReviverSoft, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Privacy Reviver\Privacy Reviver.lnk, Delete-on-Reboot, [2838], [430443],1.0.2701
PUP.Optional.ReviverSoft, C:\Users\{username}\AppData\Local\PrivacyReviver\chcookies.txt, Delete-on-Reboot, [2838], [430444],1.0.2701
PUP.Optional.ReviverSoft, C:\Users\{username}\AppData\Local\PrivacyReviver\debug.log, Delete-on-Reboot, [2838], [430444],1.0.2701
PUP.Optional.ReviverSoft, C:\Users\{username}\AppData\Local\PrivacyReviver\ffcookies.txt, Delete-on-Reboot, [2838], [430444],1.0.2701
PUP.Optional.ReviverSoft, C:\Users\{username}\AppData\Local\PrivacyReviver\iecookies.txt, Delete-on-Reboot, [2838], [430444],1.0.2701
PUP.Optional.ReviverSoft, C:\Users\{username}\AppData\Local\PrivacyReviver\log.rtf, Delete-on-Reboot, [2838], [430444],1.0.2701
PUP.Optional.ReviverSoft, C:\Users\{username}\AppData\Local\PrivacyReviver\lsttick, Delete-on-Reboot, [2838], [430444],1.0.2701
PUP.Optional.ReviverSoft, C:\Users\{username}\AppData\Local\PrivacyReviver\PrivacyReviver.settings, Delete-on-Reboot, [2838], [430444],1.0.2701
PUP.Optional.ReviverSoft, C:\Users\{username}\AppData\Local\PrivacyReviver\report.txt, Delete-on-Reboot, [2838], [430444],1.0.2701
PUP.Optional.ReviverSoft, C:\Users\{username}\AppData\Local\PrivacyReviver\wndstate.tmp, Delete-on-Reboot, [2838], [430444],1.0.2701
PUP.Optional.ReviverSoft, C:\ProgramData\ReviverSoft\Privacy Reviver\notifier.exe, Delete-on-Reboot, [2838], [430445],1.0.2701
PUP.Optional.ReviverSoft, C:\ProgramData\ReviverSoft\Privacy Reviver\tray.exe, Delete-on-Reboot, [2838], [430445],1.0.2701
PUP.Optional.ReviverSoft, C:\ProgramData\ReviverSoft\Privacy Reviver\Uninst.exe, Delete-on-Reboot, [2838], [430445],1.0.2701
PUP.Optional.ReviverSoft, C:\USERS\{username}\DESKTOP\PRIVACYREVIVERSETUP.EXE, Delete-on-Reboot, [2838], [430335],1.0.2701

Physical Sector: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements

Back to Malware Removal Guides and Tutorials



Also tagged with one or more of these keywords: reviversoft

1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.