Plagued by the Privacy Center?

Privacy Center is not Microsoft software. It’s a new form of fake antimalware software (also known as rogue security software) that pretends to help protect your computer, but is really a new form of spyware. It can slow down your computer and damage your files.

Win32/PrivacyCenter

Aliases

  • Fake_AntiSpyware.BKN (AVG)
  • Win32/FakeAV.ACR (CA)
  • Win32/Adware.PrivacyComponents (ESET)
  • not-a-virus:FraudTool.Win32.PrivacyCenter (other)
  • not-a-virus:FraudTool.Win32.Agent.jn (Kaspersky)
  • FakeAlert-CP (McAfee)
  • Troj/PrvCnt-Gen (Sophos)
  • SpywareGuard2008 (Symantec)

Trojan:Win32/PrivacyCenter is a family of programs that claims to scan for malware and displays fake warnings of “malicious programs and viruses”. They then inform the user that they need to pay money to register the software in order to remove these non-existent threats.

Symptoms
Symptoms vary among different distributions of Trojan:Win32/PrivacyCenter, however, the presence of the following system changes (or similar) may indicate the presence of this program:

  • Presence of the following directories, or similar (for example):
    %program_files%privacy center
    %application data%privacy center
  • Presence of the following registry modifications or similar (for example):
    Added value: “agent.exe”
    With data: “%program_files%privacy centeragent.exe”

To subkey: HKCUSoftwareMicrosoftWindowsCurrentVersionRun

Added value: “Shell”
With data: “%program_files%privacy centerpc.exe”
To subkey: HKCUSoftwareMicrosoftWindows NTCurrentVersionWinlogon

  • Display of the following images/dialogs, or similar (for example):

 

Read more about it here:

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32/PrivacyCenter



Leave a Reply