Wednesday, September 28, 2011

Zentom System Guard - about this Fake AV


Zentom System Guard fake Anti-Virus which requires money for registration. Otherwise it will bother you constant false messages.




Created files:
C:\Documents and Settings\<UserName>\Application Data\<RandomSymbols>\enemies-names.txt
C:\Documents and Settings\<UserName>\Application Data\<RandomSymbols>\finc70dkk.exe (or senrmodk70.exe)
C:\Documents and Settings\<UserName>\Application Data\<RandomSymbols>\hookdll.dll
C:\Documents and Settings\<UserName>\Application Data\<RandomSymbols>\local.ini
C:\Documents and Settings\<UserName>\Application Data\Microsoft\Internet Explorer\Quick Launch\Zentom System Guard.lnk
C:\Documents and Settings\<UserName>\Desktop\Zentom System Guard.lnk
C:\Documents and Settings\<UserName>\Start Menu\Programs\Startup\Zentom System Guard.lnk
C:\Documents and Settings\<UserName>\Start Menu\Programs\Zentom System Guard
C:\Documents and Settings\<UserName>\Start Menu\Programs\Zentom System Guard\Uninstall.lnk
C:\Documents and Settings\<UserName>\Start Menu\Programs\Zentom System Guard\Zentom System Guard.lnk
C:\Documents and Settings\<UserName>\Start Menu\Zentom System Guard.lnk

Register changes:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "finc70dkk.exe" (or senrmodk70.exe)
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zentom System Guard
HKCU\Software\Zentom System Guard Inc\Zentom System Guard





To remove this rogue go to the website www.Trojan-Killer.net and download Trojan-Killer.


Run and install it.




Upon completion of installation, select Launch GridinSoft Trojan Killer and click Finish.




When the Trojan Killer will look up your computer you will see a full list of detected malware.
Press the Remove Selected to remove them.




No comments: