Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for Privacy Plus

- - - - -
Started by Metallica , Apr 26 2017 02:44 AM
1-877-777-5592

  • Please log in to reply
No replies to this topic

#1
Metallica
Posted 26 April 2017 - 02:44 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is Privacy Plus?

The Malwarebytes research team has determined that Privacy Plus is a "system optimizer". These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
More information can be found on our Malwarebytes Labs blog.

How do I know if I am infected with Privacy Plus?

This is how the main screen of the sytem optimizer looks:

main.png

You will find these icons in your taskbar, startmenu and on your desktop:

icons.png

and see these warnings during install:

warning1.png

warning2.png

and these screens during "operations":

results.png

warning5.png

You may see this entry in your list of installed programs:

warning4.png

and these tasks in your Task Scheduler:

warning3.png

How did Privacy Plus get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was downloaded from their site.

How do I remove PrivacyPlus?

Our program Malwarebytes can detect and remove this potentially unwanted application.
  • Please download Malwarebytes to your desktop.
  • Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
  • Then click Finish.
  • Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
  • If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Privacy Plus?
  • No, Malwarebytes removes PrivacyPlus completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this system optimizer.

As you can see below the full version of Malwarebytes would have protected you against the PrivacyPlus installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png


and we block access to their domain:

protection2.png


Technical details for experts

You may see these entries in FRST logs:

 (Privacy Plus) C:\Program Files (x86)\Privacy Plus\PrivacyPlus.exe
 HKCU\...\Run: [PrivacyPlus] => C:\Program Files (x86)\Privacy Plus\PrivacyPlus.exe [6331712 2017-01-16] (Privacy Plus)
 C:\Windows\System32\Tasks\PrivacyPlus_Popup3
 C:\Windows\System32\Tasks\PrivacyPlus_Popup
 C:\Users\{username}\AppData\Local\PrivacyPlus
 C:\Windows\System32\Tasks\PrivacyPlus_Master
 C:\Users\{username}\Desktop\Privacy Plus.lnk
 C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Privacy Plus
 C:\Program Files (x86)\Privacy Plus

Privacy Plus (HKLM-x32\...\Privacy Plus) (Version: 3.2.9 - Privacy Plus)
Task: {761FF17A-25EE-4512-8547-49807E32DF44} - System32\Tasks\PrivacyPlus_Popup => C:\Program Files (x86)\Privacy Plus\PrivacyPlus.exe [2017-01-16] (Privacy Plus)
Task: {9F6002A8-2981-4167-A062-112F9A02BDB0} - System32\Tasks\PrivacyPlus_Master => C:\Program Files (x86)\Privacy Plus\InstAct.exe [2017-01-16] ()
Task: {F0C4BD9F-CDD0-4948-8B3F-BB1C6E958F3F} - System32\Tasks\PrivacyPlus_Popup3 => C:\Program Files (x86)\Privacy Plus\PrivacyPlus.exe [2017-01-16] (Privacy Plus)
Alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\Privacy Plus
       Adds the file Esent.Interop.dll"="11/19/2015 2:16 PM, 326656 bytes, A
       Adds the file InstAct.exe"="1/16/2017 7:56 AM, 36160 bytes, A
       Adds the file InstAct.exe.config"="8/20/2015 12:34 PM, 232 bytes, A
       Adds the file Microsoft.Win32.TaskScheduler.dll"="11/19/2015 2:16 PM, 322560 bytes, A
       Adds the file Newtonsoft.Json.dll"="11/19/2015 2:16 PM, 494080 bytes, A
       Adds the file PrivacyEngine.dll"="1/16/2017 7:54 AM, 125952 bytes, A
       Adds the file PrivacyEngine.dll.config"="11/19/2015 2:16 PM, 229 bytes, A
       Adds the file PrivacyPlus.exe"="1/16/2017 7:56 AM, 6331712 bytes, A
       Adds the file PrivacyPlus.exe.config"="11/19/2015 2:16 PM, 231 bytes, A
       Adds the file Push.exe"="1/16/2017 7:57 AM, 25408 bytes, A
       Adds the file Push.exe.config"="12/12/2016 7:24 AM, 224 bytes, A
       Adds the file schedc.exe"="1/16/2017 7:56 AM, 30016 bytes, A
       Adds the file schedc.exe.config"="11/19/2015 2:16 PM, 232 bytes, A
       Adds the file schedc10.exe"="1/16/2017 7:56 AM, 32576 bytes, A
       Adds the file schedc10.exe.config"="11/19/2015 2:16 PM, 232 bytes, A
       Adds the file Setup.dll"="1/16/2017 7:54 AM, 67584 bytes, A
       Adds the file Setup.dll.config"="8/18/2015 7:10 AM, 229 bytes, A
       Adds the file System.Data.SQLite.dll"="11/19/2015 2:16 PM, 1175552 bytes, A
       Adds the file TaskTools.exe"="1/16/2017 7:56 AM, 61760 bytes, A
       Adds the file TaskTools.exe.config"="11/19/2015 2:16 PM, 231 bytes, A
       Adds the file uninstall.exe"="1/16/2017 7:57 AM, 198664 bytes, A
       Adds the file updater.exe"="1/16/2017 7:56 AM, 507200 bytes, A
       Adds the file updater.ini"="4/26/2017 9:09 AM, 366 bytes, A
       Adds the file Util.dll"="1/16/2017 7:54 AM, 233984 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\ar
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 37376 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\da
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 32256 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\de
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 34816 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\es
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 33792 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\fil-PH
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 31744 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\fr
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 34304 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\he
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 32768 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\it
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 33792 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\ja
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 36352 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\nl
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 32768 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\no
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 32256 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\pt
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 33280 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\ru
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 39936 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\se-FI
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 33280 bytes, A
    Adds the folder C:\Program Files (x86)\Privacy Plus\sv
       Adds the file PrivacyPlus.resources.dll"="1/16/2017 7:54 AM, 32256 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\PrivacyPlus
       Adds the file chcookies.txt"="4/26/2017 9:12 AM, 2928 bytes, A
       Adds the file cla"="4/26/2017 9:09 AM, 94 bytes, A
       Adds the file debug.log"="4/26/2017 9:10 AM, 900 bytes, A
       Adds the file ffcookies.txt"="4/26/2017 9:12 AM, 7432 bytes, A
       Adds the file iecookies.txt"="4/26/2017 9:12 AM, 1544 bytes, A
       Adds the file log.rtf"="4/26/2017 9:10 AM, 1286 bytes, A
       Adds the file lsttick"="4/26/2017 9:10 AM, 8 bytes, A
       Adds the file PrivacyPlus.settings"="4/26/2017 9:10 AM, 1840 bytes, A
       Adds the file report.txt"="4/26/2017 9:10 AM, 92 bytes, A
       Adds the file wndstate.tmp"="4/26/2017 9:10 AM, 5 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Privacy Plus
       Adds the file Privacy Plus.lnk"="4/26/2017 9:09 AM, 1086 bytes, A
       Adds the file Uninstall Privacy Plus.lnk"="4/26/2017 9:09 AM, 858 bytes, A
    In the existing folder C:\Users\{username}\Desktop
       Adds the file Privacy Plus.lnk"="4/26/2017 9:09 AM, 1050 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file PrivacyPlus_Master"="4/26/2017 9:09 AM, 3008 bytes, A
       Adds the file PrivacyPlus_Popup"="4/26/2017 9:10 AM, 3472 bytes, A
       Adds the file PrivacyPlus_Popup3"="4/26/2017 9:10 AM, 3738 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Privacy Plus]
       " "="REG_SZ", "C:\Program Files (x86)\Privacy Plus\PrivacyPlus.exe""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Privacy Plus]
       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Privacy Plus\PrivacyPlus.exe"
       "DisplayName"="REG_SZ", "Privacy Plus"
       "DisplayVersion"="REG_SZ", "3.2.9"
       "EstimatedSize"="REG_DWORD", 10042
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "Privacy Plus"
       "QuietUninstallString"="REG_SZ", "C:\Program Files (x86)\Privacy Plus\uninstall.exe /S"
       "UninstallString"="REG_SZ", "C:\Program Files (x86)\Privacy Plus\uninstall.exe"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Privacy Plus\Privacy Plus]
       "Path"="REG_SZ", "C:\Program Files (x86)\Privacy Plus"
       "Version"="REG_SZ", "3.2.9"
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
       "PrivacyPlus"="REG_SZ", ""C:\Program Files (x86)\Privacy Plus\PrivacyPlus.exe" minimized"
    [HKEY_CURRENT_USER\Software\Privacy Plus\Privacy Plus]
       "Custom1"="REG_DWORD", 0
       "Custom2"="REG_DWORD", 0
       "ResName"="REG_SZ", "Regular"
    [HKEY_CURRENT_USER\Software\PrivacyPlusValidity]
       "Base"="REG_SZ", ""
       "Bios"="REG_SZ", ""
       "BuyLink"="REG_SZ", "http://privacy.plus/buy?pin="
       "Cpu"="REG_SZ", ""
       "Disk"="REG_SZ", ""
       "lang"="REG_SZ", "en"
       "NeedsRenewal"="REG_SZ", "False"
       "PhoneNum"="REG_SZ", "+1-877-777-5592"
       "Reg"="REG_SZ", "EAAAADadnLVX0uqmSJRbFp1/saYuRNTm3ilnDREdq8"
       "SplashTime"="REG_QWORD, ....
       "Support"="REG_SZ", "http://privacy.plus/support.php?pin="
Malwarebytes log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 4/26/17
Scan Time: 9:24 AM
Logfile: mbamPrivacyPlus.txt
Administrator: Yes

-Software Information-
Version: 3.0.6.1469
Components Version: 1.0.96
Update Package Version: 1.0.1810
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 328642
Time Elapsed: 3 min, 32 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 1
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\PrivacyPlus.exe, Quarantined, [4248], [393197],1.0.1810

Module: 2
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\PrivacyPlus.exe, Quarantined, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\System.Data.SQLite.dll, Quarantined, [4248], [393197],1.0.1810

Registry Key: 8
PUP.Optional.PrivacyPlus, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Privacy Plus, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, HKLM\SOFTWARE\WOW6432NODE\Privacy Plus, Delete-on-Reboot, [4248], [393206],1.0.1810
PUP.Optional.PrivacyPlus, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\Privacy Plus, Delete-on-Reboot, [4248], [393203],1.0.1810
PUP.Optional.PrivacyPlus, HKCU\SOFTWARE\Privacy Plus, Delete-on-Reboot, [4248], [393207],1.0.1810
PUP.Optional.PrivacyPlus, HKCU\SOFTWARE\PrivacyPlusValidity, Delete-on-Reboot, [4248], [393208],1.0.1810
PUP.Optional.PrivacyPlus, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\PrivacyPlus_RASAPI32, Delete-on-Reboot, [4248], [393205],1.0.1810
PUP.Optional.PrivacyPlus, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\PrivacyPlus_RASMANCS, Delete-on-Reboot, [4248], [393205],1.0.1810
PUP.Optional.PrivacyPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\Privacy Plus, Delete-on-Reboot, [4248], [393203],1.0.1810

Registry Value: 1
PUP.Optional.PrivacyPlus, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|PrivacyPlus, Delete-on-Reboot, [4248], [393197],1.0.1810

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 18
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\fil-PH, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\se-FI, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\ar, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\da, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\de, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\es, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\fr, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\he, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\it, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\ja, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\nl, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\no, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\pt, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\ru, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\sv, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\PROGRAM FILES (X86)\Privacy Plus, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\USERS\{username}\APPDATA\LOCAL\PrivacyPlus, Delete-on-Reboot, [4248], [393198],1.0.1810
PUP.Optional.PrivacyPlus, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\PRIVACY PLUS, Delete-on-Reboot, [4248], [393199],1.0.1810

File: 56
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\ar\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\da\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\de\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\es\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\fil-PH\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\fr\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\he\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\it\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\ja\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\nl\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\no\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\pt\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\ru\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\se-FI\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\sv\PrivacyPlus.resources.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\Esent.Interop.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\InstAct.exe, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\InstAct.exe.config, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\Microsoft.Win32.TaskScheduler.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\Newtonsoft.Json.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\PrivacyEngine.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\PrivacyEngine.dll.config, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\PrivacyPlus.exe, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\PrivacyPlus.exe.config, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\Push.exe, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\Push.exe.config, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\schedc.exe, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\schedc.exe.config, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\schedc10.exe, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\schedc10.exe.config, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\Setup.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\Setup.dll.config, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\System.Data.SQLite.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\TaskTools.exe, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\TaskTools.exe.config, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\uninstall.exe, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\updater.exe, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\updater.ini, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Program Files (x86)\Privacy Plus\Util.dll, Delete-on-Reboot, [4248], [393197],1.0.1810
PUP.Optional.PrivacyPlus, C:\Users\{username}\AppData\Local\PrivacyPlus\chcookies.txt, Delete-on-Reboot, [4248], [393198],1.0.1810
PUP.Optional.PrivacyPlus, C:\Users\{username}\AppData\Local\PrivacyPlus\cla, Delete-on-Reboot, [4248], [393198],1.0.1810
PUP.Optional.PrivacyPlus, C:\Users\{username}\AppData\Local\PrivacyPlus\debug.log, Delete-on-Reboot, [4248], [393198],1.0.1810
PUP.Optional.PrivacyPlus, C:\Users\{username}\AppData\Local\PrivacyPlus\ffcookies.txt, Delete-on-Reboot, [4248], [393198],1.0.1810
PUP.Optional.PrivacyPlus, C:\Users\{username}\AppData\Local\PrivacyPlus\iecookies.txt, Delete-on-Reboot, [4248], [393198],1.0.1810
PUP.Optional.PrivacyPlus, C:\Users\{username}\AppData\Local\PrivacyPlus\log.rtf, Delete-on-Reboot, [4248], [393198],1.0.1810
PUP.Optional.PrivacyPlus, C:\Users\{username}\AppData\Local\PrivacyPlus\lsttick, Delete-on-Reboot, [4248], [393198],1.0.1810
PUP.Optional.PrivacyPlus, C:\Users\{username}\AppData\Local\PrivacyPlus\PrivacyPlus.settings, Delete-on-Reboot, [4248], [393198],1.0.1810
PUP.Optional.PrivacyPlus, C:\Users\{username}\AppData\Local\PrivacyPlus\report.txt, Delete-on-Reboot, [4248], [393198],1.0.1810
PUP.Optional.PrivacyPlus, C:\Users\{username}\AppData\Local\PrivacyPlus\wndstate.tmp, Delete-on-Reboot, [4248], [393198],1.0.1810
PUP.Optional.PrivacyPlus, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Privacy Plus\Privacy Plus.lnk, Delete-on-Reboot, [4248], [393199],1.0.1810
PUP.Optional.PrivacyPlus, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Privacy Plus\Uninstall Privacy Plus.lnk, Delete-on-Reboot, [4248], [393199],1.0.1810
PUP.Optional.PrivacyPlus, C:\USERS\{username}\DESKTOP\PRIVACY PLUS.LNK, Delete-on-Reboot, [4248], [393200],1.0.1810
PUP.Optional.PrivacyPlus, C:\USERS\{username}\DESKTOP\PRIVACYPLUSSETUP.EXE, Delete-on-Reboot, [4248], [393226],1.0.1810
PUP.Optional.PrivacyPlus, C:\WINDOWS\SYSTEM32\TASKS\PrivacyPlus_Master, Delete-on-Reboot, [4248], [393201],1.0.1810
PUP.Optional.PrivacyPlus, C:\WINDOWS\SYSTEM32\TASKS\PrivacyPlus_Popup, Delete-on-Reboot, [4248], [393201],1.0.1810
PUP.Optional.PrivacyPlus, C:\WINDOWS\SYSTEM32\TASKS\PrivacyPlus_Popup3, Delete-on-Reboot, [4248], [393201],1.0.1810

Physical Sector: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements

Back to Malware Removal Guides and Tutorials


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.