Sep 9, 2009

Remove Windows Guard Pro - WindowsGuardPro Removal Information

Windows Guard Pro is a misleading security application that uses false scan results, fake security alerts and notifications about serious system security threats to make you think your computer is infected with spyware, adware, Trojans and other malware. The rogue program was released by the same group of malware creators who have developed Windows System Suite, Windows Additional Guard and Windows Protection Suite. Once installed Windows Guard Pro starts automatically scanning your system without even asking for. The result of the scanning is really predictable: the system is infected and is needed to be cleaned up as soon as possible. Windows Guard Pro even gives you a solution at a time. It will offer you to purchase the “full” “licensed” version of Windows Guard Pro for a not small amount of money. The problem occurred after you have caught on this fishing pole. The reason is simple: Windows Guard Pro was created to convince people to pay for the “licensed” program, and at the same the application steals the money of the victims. Moreover this application doesn’t stop just on money. It will continue to work even when you are not log in, so it has full access to people private information stored down on their computers. That has been said: uninstall Windows Guard Pro as soon as possible, because the results might be unpredictable.

Type: Rogue Anti-Spyware
Malware Author: dreamakerlab

Threat Level: Critical
Screenshot:

How to remove Windows Guard Pro manually:
It's possible to remove Windows Guard Pro manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

c:\Documents and Settings\All Users\Application Data\9201
c:\Documents and Settings\All Users\Application Data\9201\1527.mof
c:\Documents and Settings\All Users\Application Data\9201\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\9201\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\9201\unins000.dat
c:\Documents and Settings\All Users\Application Data\9201\WindowsGP.exe
c:\Documents and Settings\All Users\Application Data\9201\WINGP.ico
c:\Documents and Settings\All Users\Application Data\9201\WINGPSys
c:\Documents and Settings\All Users\Application Data\9201\WINGPSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\WINGPSys
c:\Documents and Settings\All Users\Application Data\WINGPSys\winpg.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Guard Pro.lnk
%UserProfile%\Application Data\Windows Guard Pro
%UserProfile%\Application Data\Windows Guard Pro\cookies.sqlite
%UserProfile%\Desktop\Windows Guard Pro.lnk
%UserProfile%\Start Menu\Windows Guard Pro.lnk
%UserProfile%\Start Menu\Programs\Windows Guard Pro.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml


Remove registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Windows Guard Pro
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WindowsGP.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "787917903"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Guard Pro"


Please be careful because manual removal of Windows Guard Pro may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.

No comments:

/