Get Rid of Zentom System Guard Trojan
Zentom System Guard is defined as trojan and its typical components are listed in threat databases. The infection has been found to be installed manually as it is posed as certain content that users find beneficial and agree on its integration into computer memory. It is not necessarily declared a piece of software. For instance, it could be downloaded under the guise of media file. The application is total ignorant in recognizing computer viruses, but it is a geek of faking GUI of security software for Windows.
The trojan generates strings of alerts, text of which is stolen from other fake and true security solutions. The alerts ate often shown on the background of restrictions applied by the adware to system and other software features. This seems to justify the popups and make them sound as though they are shown in time.
Zentom System Guard free uninstaller
To remove Zentom System Guard , a number of files and system registry entries need to be deleted. Relevant method is provided below.

Zentom System Guard Removal Manual
Coming soon
Incomplete or incorrect extermination of files and registry values constituting the infection, e.g. deletion of harmless files and registry entries instead of those specified below due to mistyping, is quite possible. Furthermore, resent observations on fake security tools have shown that this kind of malware might strike back, i.e. make harm to computer system in response to attempt of deleting its components.
If you are a Windows user, secure your computer system before proceeding to the adware extermination by means of system and registry backup prior to launching deletion of the adware components.
4 easy steps to remove fake antivirus:
Step1. System Backup
- Windows XP Here
- Windows Vista Here
- Windows 7 Here
Step2. Killing Processes (in Windows)
You must kill Zentom System Guard processes:
Once system and registry backup is complete, make sure the infection you want to get rid of is not currently running any processes; otherwise kill its processes in the Task Manager.
Step3. Exposure and Detection and Deletion of Zentom System Guard Files
Once the targeted infection is idle, you need to find its relevant entries. Some of them might be hidden as the malware often attributes such value to its files in order to reduce the risk of their deletion.
%APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\nv716saver.exe
%APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\local.ini
%TEMP%\2AD39F.dmp
%APPDATA%\Adobe\plugs\KB2721125.exe
%TEMP%\2A9473.dmp
%USERPROFILE%\Start Menu\Programs\Startup\Zentom System Guard.lnk
%TEMP%\WER13.tmp
%TEMP%\FY11.tmp
%TEMP%\2B88A7.dmp
%TEMP%\WER15.tmp
%USERPROFILE%\Start Menu\Programs\Zentom System Guard\Zentom System Guard.lnk
%TEMP%\2A8F24.dmp
%USERPROFILE%\Start Menu\Programs\Zentom System Guard\Uninstall.lnk
%APPDATA%\Adobe\plugs\KB2692265.exe
%TEMP%\44d18f1b51a1182dac79e4320ec31538310a8c5f
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\Zentom System Guard.lnk
%USERPROFILE%\Start Menu\Zentom System Guard.lnk
%TEMP%\WER14.tmp
%TEMP%\WER13.tmp.dir00\appcompat.txt
%TEMP%\WER14.tmp.dir00\appcompat.txt
%TEMP%\WER15.tmp.dir00\appcompat.txt
%TEMP%\2AE6AA.dmp
%TEMP%\WER16.tmp.dir00\appcompat.txt
%APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\hookdll.dll
*This malicious software creates the folders and files with random names, most likely you will not find in their files and folders with names such as in the example above, but they will look something like this.
How to Expose and Detect Files
Step4. Delete System Registry Values
Edit System Registry deleting the following entries:
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\
HKEY_CURRENT_USER\SESSIONINFORMATION\PROGRAMCOUNT = 4
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NV716SAVER.EXE = “%APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\nv716saver.exe”
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\DISPLAYICON = %APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\nv716saver.exe,0
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\DISPLAYNAME = Zentom System Guard
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\INSTALLLOCATION = %APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\NOMODIFY = 1
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\NOREPAIR = 1
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ZENTOM SYSTEM GUARD\UNINSTALLSTRING = %APPDATA%\205BA7C8FC5F7E32A2A4797AFBB34F61\nv716saver.exe /uninstall
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\AFFID = 7071627000
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\COID = Mjg5MzUxNTgyMjc4OTk5M1ZDuo9FTE
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\DATABASE_VERSION = 246
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\DATARL1 = KRoAGVdOQwQJHBA2QQoa
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\DATARL2 = KRoAGVdOQwQJHBA2QQoa
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\DATARLA
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\INST = ok
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\INSTALL_TIME = 4/21/20[private subnet] PM
HKEY_CURRENT_USER\SOFTWARE\ZENTOMSYSTEMGUARD\ZENTOM SYSTEM GUARD\VIRUS_SIGNATURES = 64274
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\*KB2721125.EXE = “%APPDATA%\Adobe\plugs\KB2721125.exe”
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet\CONTROL\SESSION MANAGER\PENDINGFILERENAMEOPERATIONS = \??\%TEMP%\err.log2675046
Files and registry entries for Zentom System Guard

Disclaimer





