Home Malware Programs Fake Warning Messages Zlob.Porn.Ad

Zlob.Porn.Ad

Posted: February 16, 2010

Zlob.Porn.Ad is a fake infection used by Paladin Antivirus rogue security software to scare Internet users into purchasing its defunct product. When Paladin Antivirus scamware enters your workstation, it displays false alerts to try and frighten you to think your PC is infected. One such warning says "Warning! Adware detected!" Zlob.Porn.Ad appears as the main Adware threat in the phony alert. The Zlob.Porn.Ad parasite is not really on your machine, so do not fall for this trickery and have Paladin Antivirus and all other related threats removed using a reliable anti-spyware program.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\Paladin Antivirus.lnk
    2 %Documents and Settings%\[UserName]\Desktop\Paladin Antivirus Support.lnk
    3 %Documents and Settings%\[UserName]\Desktop\Paladin Antivirus.lnk
    4 %Documents and Settings%\[UserName]\Start Menu\Programs\Paladin Antivirus
    5 %Documents and Settings%\[UserName]\Start Menu\Programs\Paladin Antivirus\Paladin Antivirus Support.lnk
    6 %Documents and Settings%\[UserName]\Start Menu\Programs\Paladin Antivirus\Paladin Antivirus.lnk
    7 %Documents and Settings%\[UserName]\Start Menu\Programs\Paladin Antivirus\Uninstall Paladin Antivirus.lnk
    8 %Program Files%\Paladin Antivirus
    9 %Program Files%\Paladin Antivirus\help.ico
    10 %Program Files%\Paladin Antivirus\pav.db
    11 %Program Files%\Paladin Antivirus\pav.exe
    12 %Program Files%\Paladin Antivirus\pavext.dll
    13 %Program Files%\Paladin Antivirus\phook.dll
    14 %Program Files%\Paladin Antivirus\uninstall.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Paladin AntivirusHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Paladin Antivirus"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Paladin Antivirus

Related Posts

Loading...