Category:Ransomware
PCPrivacy.Tool Detection :
Files:
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\PCPrivacyTool unregistered.lnk
[%DESKTOP%]\Install PCPrivacyTool .lnk
[%DESKTOP%]\PCPrivacyTool unregistered.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\PCPrivacyTool unregistered.lnk
[%DESKTOP%]\Install PCPrivacyTool .lnk
[%DESKTOP%]\PCPrivacyTool unregistered.lnk
Folders:
[%APPDATA%]\PCPrivacyTool
[%COMMON_PROGRAMS%]\PCPrivacyTool
[%PROGRAM_FILES%]\PCPrivacyTool
[%PROGRAM_FILES_COMMON%]\PCPrivacyTool
Registry Keys:
HKEY_CLASSES_ROOT\*\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\.exe\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\.lnk\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\clsid\{645ff040-5081-101b-9f08-00aa002f954e}\shell\secure delete
HKEY_CLASSES_ROOT\clsid\{b33de756-deee-4d7a-87db-1d905ba2aa21}
HKEY_CLASSES_ROOT\directory\background\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\directory\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\drive\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\exefile\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\folder\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\lnkfile\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\systemfileassociations\directory.audio\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\systemfileassociations\directory.image\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\systemfileassociations\directory.video\shellex\contextmenuhandlers\secure_del
HKEY_CURRENT_USER\software\pcprivacytool
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\gdc_is1
HKEY_LOCAL_MACHINE\software\pc drive tool
HKEY_LOCAL_MACHINE\software\pcprivacytool
HKEY_LOCAL_MACHINE\software\ugdccw
Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved
Removing PCPrivacy.Tool:
you can run trial version of ExterminateIt, or remove PCPrivacy.Tool manually..ExterminateIt effectively and automatically removes Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware) from you computer.
Download ExterminateIt! to instantly get rid of PCPrivacy.Tool!
Also Be Aware of the Following Threats:
CorporateLife Trojan Symptoms
relev.ant.com Tracking Cookie Symptoms
SageAnalyst Tracking Cookie Removal
Bancos.GRP Trojan Cleaner
Remove Doomob Trojan
Posts
