Warning! popup
O Warning! popup é um alerta falso de aviso de segurança, exibido pelo falso aplicativo anti-spyware do Privacidade Components. No texto do alerta lê-se:
"Atenção! Um ou vários componentes de segurança relataram alguns problemas! Traços de arquivos suspeitos (por exemplo, a história de visitar sites pornográficos) e vulnerabilidades de segurança foram encontrados. Clique nesta notificação para eliminar a vulnerabilidade imediatamente!"
Depois que o Privacidade Components é instalado no PC dos usuários, outros falsos popups e alertas serão exibidos. O objetivo desses falsos alertas é convencer o usuário de que seu PC está infectado para que ele compre a versão completa do aplicativo do Privacy Components. O usuário deve remover essa infecção, sem hesitação.
Detalhes Sobre os Arquivos do Sistema
Warning! popup pode criar o(s) seguinte(s) arquivo(s):
| # | Nome do arquivo |
Detecções
Detecções: O número de casos confirmados e suspeitos de uma determinada ameaça detectada nos computadores infectados conforme relatado pelo SpyHunter.
|
|---|---|---|
| 1. | c:\Program Files\Privacy components\tools\sc\libeay32.dll | |
| 2. | c:\Program Files\Privacy components\tools\sc\tap0801.sys | |
| 3. | c:\Program Files\Privacy components\uninstall.exe | |
| 4. | c:\Program Files\Privacy components\pc.exe | |
| 5. | c:\Program Files\Privacy components\tools\sc\openvpn.exe | |
| 6. | c:\Program Files\Privacy components\tools\sp\sp.dll | |
| 7. | c:\Program Files\Privacy components\agent.exe | |
| 8. | c:\Program Files\Privacy components\tools\sc\libssl32.dll | |
| 9. | c:\Program Files\Privacy components\tools\sc\tapinstall.exe | |
| 10. | %UserProfile%\Application Data\Privacy components\dbases\cg.dat | |
| 11. | %UserProfile%\Application Data\Privacy components\dbases\sc.dat | |
| 12. | %UserProfile%\Application Data\Privacy components\keys | |
| 13. | %UserProfile%\Application Data\Privacy components\keys\sc.key | |
| 14. | %UserProfile%\Application Data\Privacy components\temp\settings.ini | |
| 15. | %UserProfile%\Start Menu\Programs\Privacy components | |
| 16. | c:\Program Files\Privacy components\faq | |
| 17. | c:\Program Files\Privacy components\faq\images\gimg1.jpg | |
| 18. | c:\Program Files\Privacy components\faq\images\gimg3.jpg | |
| 19. | c:\Program Files\Privacy components\faq\images\gimg6.jpg | |
| 20. | c:\Program Files\Privacy components\faq\images\gimg9.jpg | |
| 21. | c:\Program Files\Privacy components\sounds\3.mp3 | |
| 22. | c:\Program Files\Privacy components\tools\sc\ca.crt | |
| 23. | %UserProfile%\Application Data\Privacy components\dbases | |
| 24. | %UserProfile%\Application Data\Privacy components\dbases\rd.dat | |
| 25. | %UserProfile%\Application Data\Privacy components\dbases\sp.dat | |
| 26. | %UserProfile%\Application Data\Privacy components\keys\rd.key | |
| 27. | %UserProfile%\Application Data\Privacy components\temp | |
| 28. | %UserProfile%\Desktop\Privacy components.lnk | |
| 29. | c:\Program Files\Privacy components | |
| 30. | c:\Program Files\Privacy components\faq\images | |
| 31. | c:\Program Files\Privacy components\faq\images\gimg2.jpg | |
| 32. | c:\Program Files\Privacy components\faq\images\gimg5.jpg | |
| 33. | c:\Program Files\Privacy components\faq\images\gimg8.jpg | |
| 34. | c:\Program Files\Privacy components\sounds\1.mp3 | |
| 35. | c:\Program Files\Privacy components\tools\sc | |
| 36. | c:\Program Files\Privacy components\tools\sp | |
| 37. | %UserProfile%\Application Data\Privacy components | |
| 38. | %UserProfile%\Application Data\Privacy components\dbases\mw.dat | |
| 39. | %UserProfile%\Application Data\Privacy components\dbases\sm.dat | |
| 40. | %UserProfile%\Application Data\Privacy components\keys\cg.key | |
| 41. | %UserProfile%\Application Data\Privacy components\keys\sp.key | |
| 42. | %UserProfile%\Application Data\Privacy components\temp\spfilter | |
| 43. | %UserProfile%\Start Menu\Programs\Privacy components\Privacy components.lnk | |
| 44. | c:\Program Files\Privacy components\faq\guide.html | |
| 45. | c:\Program Files\Privacy components\faq\images\gimg10.jpg | |
| 46. | c:\Program Files\Privacy components\faq\images\gimg4.jpg | |
| 47. | c:\Program Files\Privacy components\faq\images\gimg7.jpg | |
| 48. | c:\Program Files\Privacy components\sounds | |
| 49. | c:\Program Files\Privacy components\tools | |
| 50. | c:\Program Files\Privacy components\tools\sc\OemWin2k.inf |
Detalhes sobre o Registro
Warning! popup pode criar a seguinte entrada de registro ou entradas de registro:
Microsoft\Windows\CurrentVersion\Run\agent.exe
HKEY_CLASSES_ROOT\sp.TIEAdvBHO
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "agent.exe"
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D032570A-5F63-4812-A094-87D007C23012}
HKEY_CLASSES_ROOT\CLSID\{D032570A-5F63-4812-A094-87D007C23012}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Privacy components
Microsoft\Windows\CurrentVersion\Uninstall\Privacy components
Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Privacy components
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D032570A-5F63-4812-A094-87D007C23012}
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" => "C:\Program Files\Privacy components\pc.exe"
