How to remove Windows Maintenance Guard

Tuesday, June 19th, 2012 at 11:50 pm
Home » Rogue Antispyware » Windows Maintenance Guard

Windows Maintenance Guard description

Windows Maintenance Guard is a terribly annoying fraud. Not only it displays numerous alerts but it also messes a system up to a point it might be difficult to use at all. Windows Maintenance Guard is able to block regular applications, especially system tools and real security applications. This way the malware prevents it removal. Windows Maintenance Guard offers fixing all the problems after a victim pays for a “full version” of the program. Avoid the trap: Windows Maintenance Guard is not a security tool. Paying for the non-existent full version won’t make the pop-ups go away.

Here are some examples of the fake alerts:

Error
Keylogger activity detected. System information security is at risk. It is recommended to activate protection and run a full system scan.

Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.

Warning! Identity theft attempt Detected

Windows Maintenance Guard is a Rogue Antispyware software

How to manually remove Windows Maintenance Guard

To remove Windows Maintenance Guard spyware you must block Windows Maintenance Guard sites, stop and remove processes, unregister DLL files, search and delete all other Windows Maintenance Guard files and registry utility. Follow the Windows Maintenance Guard detection and removal instructions below.

The most typical software removal method is to remove Windows Maintenance Guard by using "Add or Remove Programs" service. However there may be hidden Windows Maintenance Guard files, running processes and registries in your computer, so Windows Maintenance Guard may recreate all other files after reboot.

Windows Maintenance Guard manual removal instructions

Stop and remove Windows Maintenance Guard processes:
[3 random symbols].exe
[4 random symbols].exe
Read more how to kill Windows Maintenance Guard processes

Locate and delete Windows Maintenance Guard registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-6-18_7"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "idhsudrgrf"
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Anti-Virus Professional.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avnt.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\escanv95.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbamservice.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\npf40_tw_98_nt_me_2k.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\procexplorerv1.0.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\spoolcv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vsmain.exe
Read more how to delete Windows Maintenance Guard registry entries
Download RegistryBooster 2010 to scan errors caused by Windows Maintenance Guard

Search and unregister Windows Maintenance Guard DLL libraries:
NPSWF32.dll Read more how to unregister Windows Maintenance Guard DLL files

Detect and delete other Windows Maintenance Guard files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[3 random symbols].exe
%AppData%\Protector-[4 random symbols].exe
%AppData%\result.db
%AppData%\1st$0l3th1s.cnf

We strongly recommend you to use spyware remover to track Windows Maintenance Guard and automaticaly remove Windows Maintenance Guard processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , , ,

Leave a Reply

Download does not start? Try a mirror download here