Rogue software details: AKM Antivirus 2010 Pro

AKM Antivirus 2010 Pro is a rogue security application. In order to remove it, find out what files and registry entries to look for below.

Known system changes:

Files
c:\Desktop\AKM Antivirus 2010 Pro.lnk
c:\ProgramFiles\adc32.dll
c:\ProgramFiles\alggui.exe
c:\ProgramFiles\svchost.exe
c:\ProgramFiles\AKM Antivirus 2010 Pro\AKM Antivirus 2010 Pro.exe

Folders
c:\StartMenu\AKM Antivirus 2010 Pro
c:\ProgramFiles\AKM Antivirus 2010 Pro

Registry entries
Key: HKEY_CLASSES_ROOT\CLSID\{77DC0Baa-3235-
4ba9-8BE8-aa9EB678FA02}
Key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\AdbUpd
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\AdbUpd
Key: HKEY_CLASSES_ROOT\exefile\shell\open\command
Value: (Default)
Data: C:\Program Files\alggui.exe “%1” %*
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Explorer\Browser Helper Objects\{77DC0Baa-3235-4ba9-
8BE8-aa9EB678FA02}
Key: HKEY_CURRENT_USER\Software\AKM Antivirus 2010 Pro

Source: Lavasoft Malware Lab’s Rogue Gallery.




Share this