Guard Pro is new unwanted software that is promoted through the usage of Trojans horse which makes this badware be even more perilous for your computer and all private information there. Guard Pro is rogue antispyware application. That means that everything it does is pointed to the fooling and tricking their victims, influencing them into purchasing products they do not actually stand in need of. This nasty infection can be picked up from all kinds of misleading and insecure Internet sources, while you are downloading some video codec update to view certain movies online. After Trojan has sneaked into system, it will download and then install Guard Pro on your PC. After all Guard Pro will begin working every time Windows starts. The very first thing Guard Pro is going to do is to run the fake scan of the whole system. It is classified to be so, because all the threats Guard Pro alerts you about are either legitimate Windows files or other absolutely harmless files. Guard Pro detects them as infection in order to make you feel scared and immediately purchase the license with the help of which, all parasites can be deleted. Indeed, it is not recommended to remove those files classified by Guard Pro as threats, because if to remove some important files for the computer functioning being listed there, it can damage not only your wallet, but your system as well. Also, Guard Pro will try to get over your Internet browser, so it can control your Internet traffic. Guard Pro will deny you an access to all security related web sites and this is the way this rogue antispyware program protects itself from being detected and removed. All in all, Guard Pro is very unwanted software that only pretends to be a security tool, but indeed it simple fooling application that does not bring any profits from its usage.
Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical
Screenshot:

How to remove Guard Pro manually:
It's possible to remove Guard Pro manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.
The files to be deleted:
%Documents and Settings%\[UserName]\Application Data\Guard Pro
%Documents and Settings%\[UserName]\Application Data\Guard Pro\cookies.sqlite
%Documents and Settings%\[UserName]\Application Data\Guard Pro\mozcrt19.dll
%Documents and Settings%\[UserName]\Application Data\Guard Pro\sqlite3.dll
%Documents and Settings%\[UserName]\Application Data\Guard Pro\BackUp
%Documents and Settings%\[UserName]\Application Data\Guard Pro\Quarantine Items
%Documents and Settings%\[UserName]\Application Data\Guard Pro\RootLib
%Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\Guard Pro.lnk
%Documents and Settings%\[UserName]\Desktop\Guard Pro.lnk
%Documents and Settings%\[UserName]\Start Menu\Guard Pro.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\Guard Pro.lnk
%Documents and Settings%\All Users\Application Data\117fc
%Documents and Settings%\All Users\Application Data\117fc\VH339.exe
%Documents and Settings%\All Users\Application Data\117fc\VHOOK.ico
%Documents and Settings%\All Users\Application Data\VHMELHOOOK
%Documents and Settings%\All Users\Application Data\VHMELHOOOK\VHJJOOK.cfg
Remove registry entries:
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\trial_ca8cf.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Guard Pro”
Please be careful because manual removal of Guard Pro may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\trial_ca8cf.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Guard Pro”
No comments:
Post a Comment