| PrivacyRedeemer removal process |
|
| Author:admin CopyFrom:web Hits: UpdateTime:2008-4-8 15:22:15 |
Begin of the article PrivacyRedeemer removal process
1.DownloadGoogle recommend safer browser Web browser, For more safe , Stay Secure on the Web and stay far away virus,Download URL http://www.oral8.net/firefox/firefox.htm
2. Temporarily Disable System Restore (Windows Me/XP).
3. Update the virus definitions. Reboot computer in SafeMode
4. Run a full system scan and clean/delete all PrivacyRedeemer infected files and Delete/Modify any values added to the registry.
Navigate to the subkey and delete the valuesas following:
Behavior
The program must be manually installed.
The program reports false or exaggerated system security threats on the computer.
The user is then prompted to pay for a full license of the application in order to remove the errors.
Installation
When the program is executed, it creates the following files:
- %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Privacy Redeemer.lnk
- %UserProfile%\Application Data\Privacy Redeemer\BugReport.html.tpl
- %UserProfile%\Application Data\Privacy Redeemer\comdlg32.ocx
- %UserProfile%\Application Data\Privacy Redeemer\copy.gif
- %UserProfile%\Application Data\Privacy Redeemer\Debug.log
- %UserProfile%\Application Data\Privacy Redeemer\IEHistoryClear.cmd
- %UserProfile%\Application Data\Privacy Redeemer\left_bg.jpg
- %UserProfile%\Application Data\Privacy Redeemer\left_bg1.gif
- %UserProfile%\Application Data\Privacy Redeemer\logo1.jpg
- %UserProfile%\Application Data\Privacy Redeemer\msvbvm60.dll
- %UserProfile%\Application Data\Privacy Redeemer\openlocation.exe
- %UserProfile%\Application Data\Privacy Redeemer\PrivacyRedeemer.exe
- %UserProfile%\Application Data\Privacy Redeemer\PrivacyRedeemer.exe.manifest
- %UserProfile%\Application Data\Privacy Redeemer\PrivacyRedeemerMonitor.exe
- %UserProfile%\Application Data\Privacy Redeemer\right_bg.jpg
- %UserProfile%\Application Data\Privacy Redeemer\right_bg1.gif
- %UserProfile%\Application Data\Privacy Redeemer\snd.wav
- %UserProfile%\Application Data\Privacy Redeemer\style.css
- %UserProfile%\Application Data\Privacy Redeemer\title1_bg.gif
- %UserProfile%\Application Data\Privacy Redeemer\top.jpg
- %UserProfile%\Application Data\Privacy Redeemer\unins000.dat
- %UserProfile%\Application Data\Privacy Redeemer\unins000.exe
- %UserProfile%\Application Data\Privacy Redeemer\winhttp.dll
- %UserProfile%\Application Data\Privacy Redeemer\wmsrc.exe
- %UserProfile%\Desktop\Privacy Redeemer.lnk
- %UserProfile%\Local Settings\Temp\[RANDOM FILE NAME].tmp
- C:\Documents and Settings\All Users\Start Menu\Programs\Privacy Redeemer\Privacy Redeemer.lnk
Next, the program creates the following registry entryies:
- HKEY_ALL_USERS\Software\PrivacyRedeemer\PrivacyRedeemer\"SaveMyAss"
- HKEY_ALL_USERS\Software\PrivacyRedeemer\PrivacyRedeemer\"WindowsVersion" = "Major" =5 Minor" =1 Build" =2600 ServicePack" =2.0"
- HKEY_ALL_USERS\Software\PrivacyRedeemer\PrivacyRedeemer\"AffiliateID" = "100"
- HKEY_ALL_USERS\Software\PrivacyRedeemer\PrivacyRedeemer\"RegisterURL" = "http" =//privacyredeemer.com/order.php"
- HKEY_ALL_USERS\Software\PrivacyRedeemer\PrivacyRedeemer\"CheckLicenseURL" = "https" =//secure.sweeptransact.com/Billing/API/CheckLicense.aspx"
- HKEY_ALL_USERS\Software\PrivacyRedeemer\PrivacyRedeemer\"FirstLaunchURL" = ""
- HKEY_ALL_USERS\Software\PrivacyRedeemer\PrivacyRedeemer\"ActivationSuccessURL" = "http" =//privacyredeemer.com/activate-ok.php"
- HKEY_ALL_USERS\Software\PrivacyRedeemer\PrivacyRedeemer\"FeedbackURL" = "http" =//privacyredeemer.com/bug-report.php"
- HKEY_ALL_USERS\Software\PrivacyRedeemer\PrivacyRedeemer\"BuildVersion" = "8z s titlom"
- HKEY_ALL_USERS\Software\PrivacyRedeemer\PrivacyRedeemer\"isApplicationRunning" = "true"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy RedeemerRedeemer_is1\"Inno Setup" = Setup Version" = "5.1.14"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy RedeemerRedeemer_is1\"Inno Setup" = App Path" = "C" =\Documents and Settings\Administrator\Application Data\Privacy Redeemer"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy RedeemerRedeemer_is1\"InstallLocation" = "C" =\Documents and Settings\Administrator\Application Data\Privacy Redeemer\"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy RedeemerRedeemer_is1\"Inno Setup" = Icon Group" = "Privacy Redeemer"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy RedeemerRedeemer_is1\"Inno Setup" = User" = "Administrator"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy RedeemerRedeemer_is1\"DisplayName" = "Privacy Redeemer"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy RedeemerRedeemer_is1\"UninstallString" = ""C" =\Documents and Settings\Administrator\Application Data\Privacy Redeemer\unins000.exe""
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy RedeemerRedeemer_is1\"QuietUninstallString" = ""C" =\Documents and Settings\Administrator\Application Data\Privacy Redeemer\unins000.exe" /SILENT"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy RedeemerRedeemer_is1\"NoModify" = 0x00000001
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy RedeemerRedeemer_is1\"NoRepair" = 0x00000001
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy RedeemerRedeemer_is1\"InstallDate" = "20080310"
It also creates the following registry subkeys:
- HKEY_ALL_USERS\Software\PrivacyRedeemer
- HKEY_ALL_USERS\Software\PrivacyRedeemer\PrivacyRedeemer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy Redeemer_is1
5. Exit registry editor .
6.delete the IE temp files or you may download ATF temp files cleaner to run a full cleaning.and restart the computer.
8. Now you may remove PrivacyRedeemer successfully.
|
| howtoremoveInputer:admin Editor:admin |
| End Of The Article how to remove PrivacyRedeemer |
|
Back 个howtoremove:W32.Launcer.A
Next 个howtoremove: WinXProtector |
