Only FREE removal guides, tips, advices and spyware removers. Get rid of fake antiviruses, trojans, viruses and other computer parasites.

Home

Get Rid of Zentom System Guard Trojan


   Zentom System Guard is defined as trojan and its typical components are listed in threat databases. The infection has been found to be installed manually as it is posed as certain content that users find beneficial and agree on its integration into computer memory. It is not necessarily declared a piece of software. For instance, it could be downloaded under the guise of media file. The application is total ignorant in recognizing computer viruses, but it is a geek of faking GUI of security software for Windows.
   The trojan generates strings of alerts, text of which is stolen from other fake and true security solutions. The alerts ate often shown on the background of restrictions applied by the adware to system and other software features. This seems to justify the popups and make them sound as though they are shown in time.

Zentom System Guard free uninstaller

   To remove Zentom System Guard , a number of files and system registry entries need to be deleted. Relevant method is provided below.

You can try to use one of the absolutely free programs. Please check our collection of Free Malware Removers.

Zentom System Guard Removal Manual

Use the following serial code (activation number) to register and uninstall Zentom System Guard. Note that removal using "Add\Uninstall Programs" Windows feature WILL NOT remove realted trojans and parasites.

Coming soon

   Incomplete or incorrect extermination of files and  registry values constituting the infection, e.g. deletion of harmless files and registry entries instead of those specified below due to mistyping, is quite possible. Furthermore, resent observations on fake security tools have shown that this kind of malware might strike back, i.e.  make harm to computer system in response to attempt of deleting its components.
   If you are a Windows user, secure your computer system before proceeding to the adware extermination by means of system and registry backup prior to launching deletion of the adware components.

4 easy steps to remove fake antivirus:

Step1. System Backup

- Windows XP Here
- Windows Vista  Here
- Windows 7 Here

Step2. Killing Processes (in Windows)

You must kill Zentom System Guard processes:

KB2721125.exe

How to kill prcesses.

Once system and registry backup is complete, make sure the infection you want to get rid of is not currently running any processes; otherwise kill its processes in the Task Manager.

Step3. Exposure and Detection and Deletion of Zentom System Guard Files

Once the targeted infection is idle, you need to find its relevant entries. Some of them might be hidden as the malware often attributes such value to its files in order to reduce the risk of their deletion.

%APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\enemies-names.txt
%APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\nv716saver.exe
%APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\local.ini
%TEMP%\2AD39F.dmp
%APPDATA%\Adobe\plugs\KB2721125.exe
%TEMP%\2A9473.dmp
%USERPROFILE%\Start Menu\Programs\Startup\Zentom System Guard.lnk
%TEMP%\WER13.tmp
%TEMP%\FY11.tmp
%TEMP%\2B88A7.dmp
%TEMP%\WER15.tmp
%USERPROFILE%\Start Menu\Programs\Zentom System Guard\Zentom System Guard.lnk
%TEMP%\2A8F24.dmp
%USERPROFILE%\Start Menu\Programs\Zentom System Guard\Uninstall.lnk
%APPDATA%\Adobe\plugs\KB2692265.exe
%TEMP%\44d18f1b51a1182dac79e4320ec31538310a8c5f
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\Zentom System Guard.lnk
%USERPROFILE%\Start Menu\Zentom System Guard.lnk
%TEMP%\WER14.tmp
%TEMP%\WER13.tmp.dir00\appcompat.txt
%TEMP%\WER14.tmp.dir00\appcompat.txt
%TEMP%\WER15.tmp.dir00\appcompat.txt
%TEMP%\2AE6AA.dmp
%TEMP%\WER16.tmp.dir00\appcompat.txt
%APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\hookdll.dll

*This malicious software creates the folders and files with random names, most likely you will not find in their files and folders with names such as in the example above, but they will look something like this.

 How to Expose and Detect Files

If you have any problems, please visit our forum. We will help you!

  Step4. Delete System Registry Values

Edit System Registry deleting the following entries:

HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\
HKEY_CURRENT_USER\SESSIONINFORMATION\PROGRAMCOUNT = 4
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NV716SAVER.EXE = “%APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\nv716saver.exe”
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\DISPLAYICON = %APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\nv716saver.exe,0
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\DISPLAYNAME = Zentom System Guard
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\INSTALLLOCATION = %APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\NOMODIFY = 1
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\NOREPAIR = 1
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\UNINSTALLSTRING = %APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\nv716saver.exe /uninstall
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\AFFID = 7071627000
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\COID = Mjg5MzUxNTgyMjc4OTk5M1ZDuo9FTE
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\DATABASE_VERSION = 246
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\DATARL1 = KRoAGVdOQwQJHBA2QQoa
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\DATARL2 = KRoAGVdOQwQJHBA2QQoa
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\DATARLA
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\INST = ok
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\INSTALL_TIME = 4/21/20[private subnet] PM
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\VIRUS_SIGNATURES = 64274
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\*KB2721125.EXE = “%APPDATA%\Adobe\plugs\KB2721125.exe”
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet\CONTROL\SESSION MANAGER\PENDINGFILERENAMEOPERATIONS = \??\%TEMP%\err.log2675046

Files and registry entries for Zentom System Guard

How to clean registry

If you have any difficulties with manual removal instructions - create new thread at Spyware Removal Forum, our experts will immediately help you. You can also choose and download absolutely free malware removal tools and solutions - we collected all of them in one place!

Disclaimer