How to remove Windows Be-on-Guard Edition
Monday, May 14th, 2012 at 3:58 amHome » Rogue Antispyware » Windows Be-on-Guard Edition
Windows Be-on-Guard Edition description
Windows Be-on-Guard Edition is a poor excuse of a security program. It imitates the design and actions of Windows Firewall but its real functions are different. The tool is meant to trick people into giving their money away.
Windows BeOnGuard Edition displays large amounts of counterfeit warnings. If a victims clicks on the fake notifications, they are asked to pay for deleting malware/fixing system problems. Do not trust Windows Be-on-Guard Edition alerts! It is not able to actually locate or fix a thing.
Here are some examples of Windows Be-on-Guard Edition alerts:
Error
Attempt to modify Registry key entries detected.
Registry entry analysis recommended.
Warning
Firewall has blocked a program from accessing the Internet
C:\program files\internet explorer\iexplore.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Windows Be-on-Guard Edition is a Rogue Antispyware software
How to manually remove Windows Be-on-Guard Edition
To remove Windows Be-on-Guard Edition spyware you must block Windows Be-on-Guard Edition sites, stop and remove processes, unregister DLL files, search and delete all other Windows Be-on-Guard Edition files and registry utility. Follow the Windows Be-on-Guard Edition detection and removal instructions below.
The most typical software removal method is to remove Windows Be-on-Guard Edition by using "Add or Remove Programs" service. However there may be hidden Windows Be-on-Guard Edition files, running processes and registries in your computer, so Windows Be-on-Guard Edition may recreate all other files after reboot.
Windows Be-on-Guard Edition manual removal instructions
Stop and remove Windows Be-on-Guard Edition processes:
[3 random symbols].exe
[4 random symbols].exe
Read more how to kill Windows Be-on-Guard Edition processes
Locate and delete Windows Be-on-Guard Edition registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-5-12_7"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "ypjcmvvgbv"
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AluSchedulerSvc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\emsw.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\init.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mscache.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\patch.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rwg.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tfak5.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wnad.exe
Read more how to delete Windows Be-on-Guard Edition registry entries
Download RegistryBooster 2010 to scan errors caused by Windows Be-on-Guard Edition
Search and unregister Windows Be-on-Guard Edition DLL libraries:
NPSWF32.dll
Read more how to unregister Windows Be-on-Guard Edition DLL files
Detect and delete other Windows Be-on-Guard Edition files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[3 random symbols].exe
%AppData%\Protector-[4 random symbols].exe
%AppData%\result.db
%CommonStartMenu%\Programs\Windows Be-on-Guard Edition.lnk
%Desktop%\Windows Be-on-Guard Edition.lnk
We strongly recommend you to use spyware remover to track Windows Be-on-Guard Edition and automaticaly remove Windows Be-on-Guard Edition processes, registries and files as well as other spyware threats.


