Trojaner-Board - Zentom System Guard entfernen

Zentom System Guard entfernen

Was ist Zentom System Guard?
Zentom System Guard ist ein Teil der Malware Antimalware Doctor. Zentom System Guard ist eine weitere Rogue-Malware in Form einer gefälschten Scan-Software, die mittels eines sog. Trojaners in den PC eindringt und dem Benutzer weissmacht, den PC nach Malware abzusuchen. Diese Software (Zentom System Guard) ist ein Fake und selbst eine Schadsoftware und sollte nicht gekauft werden.

Da solche Software wie Zentom System Guard sich gegen jede Entfernung wehren wird und Zentom System Guard oftmals noch Rootkits mitinstalliert, sollte eine Neuinstallation des Systems in Erwägung gezogen werden.

Verbreitet wird Scareware wie Zentom System Guard nicht mehr ausschliesslich über 'dubiose Seiten' für Cracks, KeyGens und Warez, sondern auch seriöse Seiten werden zunehmend für die Verbreitung dieser mißbraucht (http://www.trojaner-board.de/90880-d...tallation.html).

Der wichtigste Schutz vor einer Infizierung ist ein aktuelles Windows (mit allen Updates) und aktuelle Drittanbietersoftware wie Java oder Adobe Flash!

http://www.trojaner-board.de/attachm...1&d=1311826445 http://www.trojaner-board.de/attachm...1&d=1311826445

http://www.trojaner-board.de/attachm...1&d=1311826445 http://www.trojaner-board.de/attachm...1&d=1311826445

Symptome von Zentom System Guard:

ständige Fake Virenmeldungen von Zentom System Guard
PC läuft seit Zentom System Guard langsamer als üblich

Fake-Meldungen von Zentom System Guard:

Warning!
Infections on your PC can cause:
- Applications won't start
- Unwanted advertising displaying
- Loss of Internet communication
- Lost documents and settings
- Some files can disappear from PC
- You need registered version of Zentom System Guard to remove these infections.
Click "Remove threats" to activate protection and eliminate these security hazards.

Trojan.Spy threat has been detected.
This threat module advertises websites with explicit content. Be advised of such content being possibly illegal. Please click button below to locate and remove this threat now.

Warning! Removed attack detected!
Zentom System Guard has detected that somebody is trying to stole Your private data remotely via Trojan.Win32.Generic!BT.
Transfer for Your private data via internet will start in: 10 seconds
We strongly recommend You to block attack immediately.

Zentom System Guard - Hacker attack detected
Your computer is subjected to hacker attack. Zentom System Guard has detected that somebody is trying to transfer Your private data via internet. We strongly recommend you to block attack immediately.

Firewall file transfer detected
Hidden file transfer to remote host was detected
Zentom System Guardhas detected that somebody is trying to transfer Your private data via internet. We strongly recommend you to block attack immediately.

Warning! Threat detected!
Threat module detected on your PC!
Zlob.Porn.Ad threat has been detected. This threat module advertises websites with explicit content. Be advised of such content being possibly illegal. Please click button below to locate and remove this threat now.

Network intrusion detected!
Warning! Network attack detected!
Process is trying to steal your passwords listed below. It is highly recommended to block this threat now.
Your computer is being attacked from a remote PC.
Attack from: 145.7.151.43:34630

Protection Center Alert
To help protect your computer, Zentom System Guard has blocked some features of this program
Zentom System Guard has detected unauthorized activity, but unfortunately trial version cannot remove viruses, keyloggers and other treats. Your personal data under serious risk. It is strongly recommended to register Your copy of Zentom System Guard and prevent intrusion for future.
Do You want to block this suspicious software?
Name: Trojan.Win32.Autoit.agg
Alert level: High
Description: It is highly recommended to remove this threat from your PC

Dateien von Zentom System Guard:

Code:

%AppData%\<zufällig>\

%AppData%\<zufällig>\enemies-names.txt

%AppData%\<zufällig>\hookdll.dll

%AppData%\<zufällig>\local.ini

%AppData%\<zufällig>\lsrslt.ini

%AppData%\<zufällig>\<zufällig>.exe

%AppData%\Microsoft\Internet Explorer\Quick Launch\Zentom System Guard.lnk

%StartMenu%\Zentom System Guard.lnk

%StartMenu%\Programs\Zentom System Guard\

%StartMenu%\Programs\Startup\Zentom System Guard.lnk

%StartMenu%\Programs\Zentom System Guard\Uninstall.lnk

%StartMenu%\Programs\Zentom System Guard\Zentom System Guard.lnk

%UserProfile%\Desktop\Zentom System Guard.lnk

Registry-Einträge von Zentom System Guard:

Code:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zentom System Guard

HKEY_CURRENT_USER\Software\ZentomSystemGuard

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<zufällig>.exe"

Zentom System Guard im HijackThis-Log:

Code:

O4 - HKCU\..\Run: [<zufällig>.exe] "%AppData%\<zufällig>\<zufällig>.exe"