PrivaZer Discussion Thread

Privazer team
Any chance of adding MFT attribute cleaning stats to the summary listing of actions taken, only show MFT entries currently

 

Wonderful idea
Some users ask us what was deleted in the MFT entry as datetimes, filenames, etc...

We will add it in a next release.

 

Many thanks.
Simple matter of housekeeping but the USN clean runs before Logfile clean but on the summary actions display they are in reverse order once run

 

Been trying out PrivaZer and while I have it configured to be somewhat cautious, I must have missed something.
By default, Notepad++ stores all unsaved open text files in C:\Users\<username>\AppData\Roaming\Notepad++\backup, and saves a "session" with all these files open in tabs. I noticed that after running PrivaZer, the session was removed, but all these files still exist in the backup directory.
Is there any way to add an exception so that PrivaZer does not clear the current Notepad++ session data?
Thank you!

 

Is it safe for 23H2 or should I wait for an update? You know M$!

Thanks

 

I am getting the following notification of an attempted exploit using the file path
"C:\Users\Owner\AppData\Local\privazer\dllhost0_4726"

It ONLY triggers when Privazer runs a scan.

Note that the "dllhost0_4726" number is different every time and the object/file/artifact or whatever it is is not found in the folder after the fact.

I have tried uninstalling, including the folder listed above, and reinstalling and it made no difference. Scans with a variety of security apps found nothing.

Any suggestions about what this is would be appreciate. Thanks in advance.

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/22/23
Protection Event Time: 1:09 AM
Log File: 619b7431-591f-11ee-8a04-b8ac6fa5035d.json

-Software Information-
Version: 4.6.2.281
Components Version: 1.0.2131
Update Package Version: 1.0.75545
License: Premium

-System Information-
OS: Windows 10 (Build 19045.344
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Exploit.PayloadProcessBlock, C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe powershell $a = Get-CimInstance -ClassName Win32_Process -Filter "Name='dllhost.exe'" | Select-Object ProcessId, CommandLine;ForEach ($b in $a) {$c=$b.ProcessId.ToString() + " " + $b.CommandLine; Add-content -Path "C:\Users\Owner\AppData\Local\privazer\dllhost0_4726" -Value $c};, Blocked, 701, 392684, 0.0.0, ,

-Exploit Data-
Affected Application: cmd
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File Name: C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe powershell $a = Get-CimInstance -ClassName Win32_Process -Filter "Name='dllhost.exe'" | Select-Object ProcessId, CommandLine;ForEach ($b in $a) {$c=$b.ProcessId.ToString() + " " + $b.CommandLine; Add-content -Path "C:\Users\Owner\AppData\Local\privazer\dllhost0_4726" -Value $c};
URL:

(end)

 

For anyone curious about this I have used Privazer for so many years now I can't remember. Never had a problem before this.

After repeated exploit notifications as above from Malwarebytes suddenly began in August and continued over a period of weeks, I have NOT received a notification from Malwarebytes regarding this since Sept. 27. I made no changes to my Privazer settings during these times. Privazer staff have emailed me asking if it is still happening and I continue to monitor for now.

 

I just downloaded the latest version of Privazer, 4.0.78, and ran it.

Then I ran SystemNinja, another cleaner. Somehow it found 10523 files that can be cleaned Most of these files were in C:\Users\MyName\AppData\Local\Temp\****

Doesn't Privazer clean that sort of files or...

 

Hello @fredvries,

Temp folders are cleaned by PrivaZer.
Do you still have this problem ?

@NetCentric,
Malwarebytes contacted. Waiting for their reply...

 

Yes. I think the problem is that other cleaners, like SystemNinja, first close browsers (forcibly) before they start cleaning. Privazer doesn't do that. Or not with all browsers.

 

support@privazer.com
I note that there is no memory clean in the specific traces scan list.
Should there be one or could it be added e.g. to Internet traces ?

 

Hello @takiabtom ,

available here :

 

Sorry but there is a wheel off here, either my understanding, your program, or both
I have used your option as specified and in order to clean memory I have to untick all and then tick memory. It then runs as desired.
However, if I then 'clean internet traces' it is unsuccessful as it cleans only items in accordance with my 'include' list..... presumably because elsewhere the only item ticked is memory. Surely this is not sensible logic and hopefully not your intention/desire. I guess when my scheduled clean runs it will also skip all apart from memory.
I am no techie but a mere user trying to run a clean and tidy laptop whilst maintaining privacy for myself, friends, clients etc. So for example I suggested cleaning memory as part of internet traces. If however, you are telling me that internet activity does not use memory then I will of course respect your superior knowledge.

 

Hello @takiabtom,

we will add the memory cleanup to the internet traces cleanup in v4.0.80

v4.0.79 just released : (24 October 2023)
+ Improved speed
+ Improved detection : SSD/HDD
+ Improved scan : MFT
+ Improved scan : LOG files
+ Minor bug fixes

 

@NetCentric

is it fixed if you update Malwarebytes ?

 

Today is November, 28th, 2023. Privazer has been freezing on my computers, it freezes around 14% on cleaning Cdrive. I have done a complete Windows file checker and other fixes to make sure it is not my computer, but it is a hit-and-miss, sometimes I get lucky and it does not freeze, other times it freezes up. I have done an uninstall and re-install a couple of times, but it does the same thing.

 

Hello @DATACHECK,

we've sent you an email with some instructions.