Zentom System Guard fake Anti-Virus which requires money for registration. Otherwise it will bother you constant false messages.
Created files:
C:\Documents and Settings\<UserName>\Application Data\<RandomSymbols>\enemies-names.txt
C:\Documents and Settings\<UserName>\Application Data\<RandomSymbols>\finc70dkk.exe (or senrmodk70.exe)
C:\Documents and Settings\<UserName>\Application Data\<RandomSymbols>\hookdll.dll
C:\Documents and Settings\<UserName>\Application Data\<RandomSymbols>\local.ini
C:\Documents and Settings\<UserName>\Application Data\Microsoft\Internet Explorer\Quick Launch\Zentom System Guard.lnk
C:\Documents and Settings\<UserName>\Desktop\Zentom System Guard.lnk
C:\Documents and Settings\<UserName>\Start Menu\Programs\Startup\Zentom System Guard.lnk
C:\Documents and Settings\<UserName>\Start Menu\Programs\Zentom System Guard
C:\Documents and Settings\<UserName>\Start Menu\Programs\Zentom System Guard\Uninstall.lnk
C:\Documents and Settings\<UserName>\Start Menu\Programs\Zentom System Guard\Zentom System Guard.lnk
C:\Documents and Settings\<UserName>\Start Menu\Zentom System Guard.lnk
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "finc70dkk.exe" (or senrmodk70.exe)
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zentom System GuardHKCU\Software\Zentom System Guard Inc\Zentom System Guard
To remove this rogue go to the website www.Trojan-Killer.net and download Trojan-Killer.
Run and install it.
Upon completion of installation, select Launch GridinSoft Trojan Killer and click Finish.
When the Trojan Killer will look up your computer you will see a full list of detected malware.
Press the Remove Selected to remove them.
No comments:
Post a Comment