|
Free malware removal tool to remove Protection Center
|
|
Écrit par Administrator |
Mardi, 08 Juin 2010 18:03
|
|
There are no translations available. Protection Center is a rogue Antispyware, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Protection Center. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Protection Center immediately from your system.

To remove Protection Center (Uninstall Protection Center)
- Download this free removal tool for Protection Center
- Extract it
- Launch
- Click on the delete button
Protection Center will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :
Files :
- %ProgramFiles%\Protection Center\cntprot.exe
- %ProgramFiles%\Protection Center\cnthook.dll
- %ProgramFiles%\Protection Center\about.ico
- %ProgramFiles%\Protection Center\activate.ico
- %ProgramFiles%\Protection Center\buy.ico
- %ProgramFiles%\Protection Center\help.ico
- %ProgramFiles%\Protection Center\scan.ico
- %ProgramFiles%\Protection Center\settings.ico
- %ProgramFiles%\Protection Center\splash.mp3
- %ProgramFiles%\Protection Center\uninstall.exe
- %ProgramFiles%\Protection Center\update.ico
- %ProgramFiles%\Protection Center\cnt.db
- %ProgramFiles%\Protection Center\cntext.dll
- %ProgramFiles%\Protection Center\virus.mp3
- %Programs%\Protection Center\About.lnk
- %Programs%\Protection Center\Activate.lnk
- %Programs%\Protection Center\Buy.lnk
- %Programs%\Protection Center\Scan.lnk
- %Programs%\Protection Center\Settings.lnk
- %Programs%\Protection Center\Update.lnk
- %Programs%\Protection Center\Protection Center Support.lnk
- %Programs%\Protection Center\Protection Center.lnk
- %AppData%\Microsoft\Internet Explorer\Quick Launch\Protection Center.lnk
- %Desktop%\Protection Center Support.lnk
- %Desktop%\Protection Center.lnk
- %ProgramFiles%\Protection Center
- %Programs%\Protection Center
- %Temp%\[random].mof
- %Temp%\[random].tmp
- %Temp%\[random].exe
- %Temp%\[random]
- %Temp%\[random].dat
Registry
Registry keys created
- HKEY_LOCAL_MACHINE\SOFTWARE\Protection Center
- HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Video For Windows
- HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Video For Windows\MCIAVI
- HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
- HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Protection Center
Registry values created
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
- HKEY_LOCAL_MACHINE\SOFTWARE\Protection Center
- Settings_0 = 0x00000001
- SecStatus_3 = 0x00000001
- SecStatus_4 = 0x00000001
- SecStatus_5 = 0x00000001
- FD = 0x00000000
- GUID = "840920988409073084089362"
- Data = ":1920:2160:2280:2640:2760:2880:3120:3240:3360:3480:3720:"
- swver = "3.0"
- dbver = "1.1"
- dbsigns = "62577"
- dbverf = "1.1"
- dbsignsf = "62577"
- InfectedFiles = "%System%\slbrccsp.dll,%System%\wavemsp.dll,%System%\wscsvc.dll,%System%\Drivers\usb8023.sys,"
- LastScan = 0x4BC29F83
- Infected = 0x00000004
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
- HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Video For Windows\MCIAVI
- DefaultOptions = 0x00000000
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
- WarnOnZoneCrossing = 0x00000000
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- Protection Center = ""%ProgramFiles%\Protection Center\cntprot.exe" -noscan"
Registry keys modified
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3

|