Thursday, December 11, 2008

PCPrivacy.Tool Ransomware

How To Remove PCPrivacy.Tool?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
PCPrivacy.Tool is dangerous virus:
A cryptovirus, cryptotrojan or cryptoworm is a type of
malware that encrypts the data belonging to an individual on a computer,
demanding a ransom for its restoration.

The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.

If the victim opens/executes the attachment, the program encrypts
a number of files on the victim's computer. A ransom note is then left behind for the victim.

The victim will be unable to open the encrypted files without the correct decryption key.
Once the ransom demanded in the ransom note is paid, the cracker may (or may not)
send the decryption key, enabling decryption of the "kidnapped" files.


PCPrivacy.Tool Symptoms:

Files:
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\PCPrivacyTool unregistered.lnk
[%DESKTOP%]\Install PCPrivacyTool .lnk
[%DESKTOP%]\PCPrivacyTool unregistered.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\PCPrivacyTool unregistered.lnk
[%DESKTOP%]\Install PCPrivacyTool .lnk
[%DESKTOP%]\PCPrivacyTool unregistered.lnk

Folders:
[%APPDATA%]\PCPrivacyTool
[%COMMON_PROGRAMS%]\PCPrivacyTool
[%PROGRAM_FILES%]\PCPrivacyTool
[%PROGRAM_FILES_COMMON%]\PCPrivacyTool

Registry Keys:
HKEY_CLASSES_ROOT\*\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\.exe\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\.lnk\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\clsid\{645ff040-5081-101b-9f08-00aa002f954e}\shell\secure delete
HKEY_CLASSES_ROOT\clsid\{b33de756-deee-4d7a-87db-1d905ba2aa21}
HKEY_CLASSES_ROOT\directory\background\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\directory\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\drive\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\exefile\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\folder\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\lnkfile\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\systemfileassociations\directory.audio\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\systemfileassociations\directory.image\shellex\contextmenuhandlers\secure_del
HKEY_CLASSES_ROOT\systemfileassociations\directory.video\shellex\contextmenuhandlers\secure_del
HKEY_CURRENT_USER\software\pcprivacytool
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\gdc_is1
HKEY_LOCAL_MACHINE\software\pc drive tool
HKEY_LOCAL_MACHINE\software\pcprivacytool
HKEY_LOCAL_MACHINE\software\ugdccw

Registry Values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
powerwebmusic.com Tracking Cookie Symptoms

No comments: