How to remove Cloud Packager virus

Cloud Packager miner hides under the names of Windows processes

Cloud Packager is a Trojan horse that is designed to mine digital currency (Bitcoin, Monero, Dashcoint, etc.) by using affected computer’s CPU^[1] and GPU processing power. Generally, mining is not illegal activity. However, this malicious program uses computer’s resources without asking user’s permission; and it’s definitely illegal.

Cloud Packager miner is mostly spread via cracks, adware bundles, and other potentially unwanted programs. In this way, the trojan can sneak inside the system unnoticed. However, the sings of the malware attack are clear – extremely slow computer’s performance.

Once Cloud Packager virus enters the system, it creates two miners that have different purposes. One of them – NvProfileUpdater64.exe – is designed to use computer’s GPU or video card. The second one – wdf.exe – uses computer’s CPU processing power. Both of these processes are visible in the Task Manager.

However, the NvProfileUpdater64.exe miner uses the name of NVIDIA^[2] driver profile updater in order to trick users that it’s a legit process. The wdf.exe uses the name of the Microsoft to hide its malicious tasks. But keep in mind that legit processes cannot use 70% or more of the computer’s resources.Thus, seeing such entries is the main sign that your computer is used for mining cryptocurrency.

Other signs that your computer might be infected with Cloud Packager virus are:

• Appearance of the Cloud Packager 1.13.0.59 uninstaller;
• Windows OS becomes sluggish and runs slowly;
• Programs do not open or freeze;
• Unknown processes run in the Task Manager using a high percentage of the computer’s resources.

If you recognized at least one of these symptoms, you should scan the system with FortectIntego or another malware removal tool to remove Cloud Packager miner from the device. The high usage of the computer’s resources might result in overheat. When your PC works in the high temperature for a long time, it might burn out.

Thus, this cyber threat might cause physical damage to your device. It goes without saying that you should not delay Cloud Packager removal in order to avoid losing your computer as well as all the important data saved in it.

Miner program spread in software bundles

The Cloud Packager hijack might occur if you download freeware or shareware incorrectly. It means that when you download some free program from the Internet, you have to monitor the installation process and make sure that you do not agree to download any “optional downloads.” For this reason, you should follow safety tips created by Los Virus^[3] security team:

• always choose reliable download sources;
• read EULA, Privacy Policy or other provided documents before installing an application. If these entries are not provided, do not install the app;
• choose Advanced/Custom installation instead of Quick/Recommended;
• read notifications in each of the steps and unmark pre-selected additional downloads (if there are any).

Removal of the Cloud Packager Trojan

If you suspect that mining trojan may have been installed on your device, you should obtain a reputable anti-malware software and run a full system scan. Tools like FortectIntego or MalwarebytesMalwarebytes can quickly remove Cloud Packager as well as other PUPs or cyber threats that may have been installed on your device as well.

However, if for some reason you cannot run automatic Cloud Packager removal, you should reboot the computer to the Safe Mode with Networking. Sometimes malicious programs can block access to security software to stay longer on the device. However, the instructions below will show you how to disable the virus first.