PrivacyCenter
Threat LevelDamageDistribution

Effects 

PrivacyCenter is an adware program that carries out the following actions:

• When it is run, it displays several warning messages indicating that the computer is infected:
  
  
  
  
• Then, it connects to a certain website in order to scan the computer in search for possible malware and shows random and false results:
  
  
• Once finished, it downloads a file called SCANNER.EXE, which has the following icon:
  
  
• When it is run, the security program is installed without giving the option to use the Cancel or Close buttons, as they are disabled:
  
  
• Once the program is installed, it carries out several analysis, indicating the computer has security problems:
  
  
• In order to eliminate these security problems, users are redirected to the website of the application, so that they purchase the security solution:
  
  

Infection strategy 

PrivacyCenter creates the files AGENT.EXE, PC.EXE and UNINSTALL.EXE, in the folder Privacy center of the Program files directory.

Additionally, it creates different files and folders in C:\Program files\Privacy center and in C:\Documents and Settings\%user%\Application data\Privacy center, which belong to the configuration of PrivacyCenter.
where %user% is the user that has logged in.

On the other hand, it creates several shortcuts to the program called PRIVACYCENTER.LNK in the Desktop and in  Programs of the Start menu.

PrivacyCenter creates the following entry in the Windows Registry:

• HKEY_LOCAL_MACHINE\Microsoft\Windows\CurrentVersion\Run
  agent.exe = C:\Program files\Privacy center\agent.exe
  By creating this entry, PrivacyCenter ensures that it is run whenever Windows is started.

Means of transmission 

PrivacyCenter can be voluntarily downloaded from the website belonging to the company that has developed it.

Further Details  

PrivacyCenter is 3,160,036 bytes in size.