FrEn

Envoyer Imprimer

Free malware removal tool to remove Protection Center

Écrit par Administrator  |  Mardi, 08 Juin 2010 18:03
AddThis Social Bookmark Button
There are no translations available.

Protection Center is a rogue Antispyware, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Protection Center. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Protection Center immediately from your system.

Protection Center

To remove Protection Center (Uninstall Protection Center)

  • Download this free removal tool for Protection Center
  • Extract it
  • Launch
  • Click on the delete button

Protection Center will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

  • cntprot.exe
  • [random].exe

Files :

  • %ProgramFiles%\Protection Center\cntprot.exe
  • %ProgramFiles%\Protection Center\cnthook.dll
  • %ProgramFiles%\Protection Center\about.ico
  • %ProgramFiles%\Protection Center\activate.ico
  • %ProgramFiles%\Protection Center\buy.ico
  • %ProgramFiles%\Protection Center\help.ico
  • %ProgramFiles%\Protection Center\scan.ico
  • %ProgramFiles%\Protection Center\settings.ico
  • %ProgramFiles%\Protection Center\splash.mp3
  • %ProgramFiles%\Protection Center\uninstall.exe
  • %ProgramFiles%\Protection Center\update.ico
  • %ProgramFiles%\Protection Center\cnt.db
  • %ProgramFiles%\Protection Center\cntext.dll
  • %ProgramFiles%\Protection Center\virus.mp3
  • %Programs%\Protection Center\About.lnk
  • %Programs%\Protection Center\Activate.lnk
  • %Programs%\Protection Center\Buy.lnk
  • %Programs%\Protection Center\Scan.lnk
  • %Programs%\Protection Center\Settings.lnk
  • %Programs%\Protection Center\Update.lnk
  • %Programs%\Protection Center\Protection Center Support.lnk
  • %Programs%\Protection Center\Protection Center.lnk
  • %AppData%\Microsoft\Internet Explorer\Quick Launch\Protection Center.lnk
  • %Desktop%\Protection Center Support.lnk
  • %Desktop%\Protection Center.lnk
  • %ProgramFiles%\Protection Center
  • %Programs%\Protection Center
  • %Temp%\[random].mof
  • %Temp%\[random].tmp
  • %Temp%\[random].exe
  • %Temp%\[random]
  • %Temp%\[random].dat

Registry

Registry keys created

  • HKEY_LOCAL_MACHINE\SOFTWARE\Protection Center
  • HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Video For Windows
  • HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Video For Windows\MCIAVI
  • HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
  • HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Protection Center

Registry values created

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
    • "DisableTaskMgr" = "1"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Protection Center
    • Settings_0 = 0x00000001
    • SecStatus_3 = 0x00000001
    • SecStatus_4 = 0x00000001
    • SecStatus_5 = 0x00000001
    • FD = 0x00000000
    • GUID = "840920988409073084089362"
    • Data = ":1920:2160:2280:2640:2760:2880:3120:3240:3360:3480:3720:"
    • swver = "3.0"
    • dbver = "1.1"
    • dbsigns = "62577"
    • dbverf = "1.1"
    • dbsignsf = "62577"
    • InfectedFiles = "%System%\slbrccsp.dll,%System%\wavemsp.dll,%System%\wscsvc.dll,%System%\Drivers\usb8023.sys,"
    • LastScan = 0x4BC29F83
    • Infected = 0x00000004
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
    • Use FormSuggest = "Yes"
  • HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Video For Windows\MCIAVI
    • DefaultOptions = 0x00000000
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
    • WarnOnZoneCrossing = 0x00000000
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • Protection Center = ""%ProgramFiles%\Protection Center\cntprot.exe" -noscan"

Registry keys modified

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
    • 1601 =

Download

 

 

Articles connexes
Derniers articles

No data

.
Information | Contact

© All Rights Reserved. net-studio.org 2009