Sophos

Privacy Watcher

Aliases
  • FraudTool.Win32.PrivacyWatcher.a
  • SPR/Fake.WinXDe.A.1
  • PrivacyWatcher
Category
Type
What to do
  • If you've received an alert for a blocked PUA or adware and decide that the application is not suitable for your workplace, then follow the instructions for removing PUAs.

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 24 April 2008 17:54:49 (GMT)
Detected by Sophos Anti-Virus for Windows, version 7, and PureMessage for Microsoft Exchange.

More Information

"Privacy Watcher" is a fake privacy protection application from www.privacy-watcher.com.

"Privacy Watcher" finds fake privacy violations on the computer and offers to remove them if the user pays for a license.

On a clean test computer "Privacy Watcher" detected 57 Privacy violations which it says "may compromise privacy and harm your reputation".

It also says:

'In order to remove the VIOLATIONS found you must be a registered Privacy Watcher subscriber. Click REGISTER NOW to activate the full version of Privacy Watcher'.

When "Privacy Watcher" is installed the following folders and files are created:

<Start Menu\Programs>\Privacy Watcher
<Start Menu\Programs>\Privacy Watcher\Privacy Watcher Uninstall.lnk
<Start Menu\Programs>\Privacy Watcher\Purchase License.lnk
<Start Menu\Programs>\Privacy Watcher\Start Privacy Watcher.lnk
<Start Menu\Programs>\Privacy Watcher\Support Page.lnk
<User>\Application Data\Privacy Watcher
<User>\Application Data\Privacy Watcher\Privacy Watcher.ini
<User>\Application Data\Privacy Watcher\Selection.dat
<User>\Cookies\<user>@www.privacy-watcher[?].txt
<Desktop>\Privacy Watcher.lnk
<Program Files>\Privacy Watcher
<Program Files>\Privacy Watcher\Buy.url
<Program Files>\Privacy Watcher\Help.url
<Program Files>\Privacy Watcher\HowToBuy.txt
<Program Files>\Privacy Watcher\License.txt
<Program Files>\Privacy Watcher\Privacy Watcher.exe
<Program Files>\Privacy Watcher\Uninstall.exe

The following registry entry is created to run Privacy Watcher.exe on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Privacy Watcher
<Program Files>\Privacy Watcher\Privacy Watcher.exe

RSS|Atom
Get reports about the latest adware and potentially unwanted applications (PUAs) delivered to your computer