Archive for November, 2011

Nov 07

Privacy Protection Adware Removal Instructions

The Emsisoft malware research team has discovered a new outbreak of the Privacy Protection. Emsisoft Anti-Malware detects this malware as Adware.Win32.PrivacyProtection.

Privacy Protection is a rogue application.  A rogue application tries to trick you by displaying false positive or misleading scan results report, which says that your computer has a problem, or infected with viruses or trojan, but you will not be able to fix it before you purchase.

Create new files:

  • %AllUsersProfiles%\Application Data\privacy.exe
  • %AllUsersProfiles%\Desktop\Privacy Protection.lnk
  • %Temp%\6C.tmp

Create new registry entries:

  • HKEY_CURRENT_USER\Software\EFF9375FC10561A906A809B93DD5038F
    FRun=”0″
    O`ld=”Qshw`bx!Qsnudbuhno”
    Q`ui=”B;]Enbtldour!`oe!Rduuhofr]@mm!Trdsr]@qqmhb`uhno!E…”
  • HKEY_CURRENT_USER|\Software\Microsoft\Windows\CurrentVersion\Run
    Privacy Protection = %AllUsersProfiles%\Application Data\privacy.exe

Screenshots:

Adware.Win32.PrivacyProtection

How to remove the infection of Privacy Protection (Adware.Win32.PrivacyProtection)?

To delete this malware infection, please download and install Emsisoft Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine.