How to stop VideoStudio malware

[flea77]

I have purchased an upgrade to VideoStudio 2023 and every time I close it, it pops up a window about their sales.

I am running VideoStudio 26.0.0.136, Windows 11 22H2
11th Gen i7-11800H 2.3GHz
32GB RAM
1TB NVMe boot/programs
2TB NVMe data/swap
NVIDIA GeForce RTX 3050 GPU

Under Help > Message Preferences > I have the two checkboxes unchecked and the drop-down set to Do not show....
I have renamed the CUH directory to prevent it from running
I have disabled all corel entries in the task scheduler
I also added the following to my registry:

Code: Select all

Windows Registry Editor Version 5.00

[HKEY_USERS\.DEFAULT\Software\Corel\CUH\Current Version]
"Communication"="disabled"

[Software\Microsoft\Windows\CurrentVersion\Run]
"Corel Update Helper"=-
"ParticleShop Update Helper"=-

To reproduce the malware effects I open Corel VideoStudio, and then close it using the X. No other actions are required.

Any assistance is appreciated before I demand a refund or file a dispute with my credit card company.

[Ken Berry]

As I have just said in another thread in the PSP forum, I regularly go to C:\ProgramData\Corel\Messages and delete anything there. I also regularly go to C:\Users\[YourName]\AppData\Roaming\Corel\Messages. This builds up rapidly with a lot of folders every time you ever open a Corel program -- and I don't just mean PSP -- and is worth checking even if you have unticked things in Help > Message Preferences.

[flea77]

WHOOP! There it is! I don't know how I missed it in another thread (overload reading I guess) but that did it. Thank you so very much! Might consider making this a sticky as I have compiled all the possible fixes in one place

Thanks again!

[lata]

You should also set your Communication Preferences on your Corel Account
This link to sign-in
https://www.corel.com/en/

[flea77]

Appreciate the thought but I use an email address that doesnt exist so they can try and spam me all they want.