How to remove Windows Maintenance Guard
Tuesday, June 19th, 2012 at 11:50 pmHome » Rogue Antispyware » Windows Maintenance Guard
Windows Maintenance Guard description
Windows Maintenance Guard is a terribly annoying fraud. Not only it displays numerous alerts but it also messes a system up to a point it might be difficult to use at all. Windows Maintenance Guard is able to block regular applications, especially system tools and real security applications. This way the malware prevents it removal. Windows Maintenance Guard offers fixing all the problems after a victim pays for a “full version” of the program. Avoid the trap: Windows Maintenance Guard is not a security tool. Paying for the non-existent full version won’t make the pop-ups go away.
Here are some examples of the fake alerts:
Error
Keylogger activity detected. System information security is at risk. It is recommended to activate protection and run a full system scan.
Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
Warning! Identity theft attempt Detected
Windows Maintenance Guard is a Rogue Antispyware software
How to manually remove Windows Maintenance Guard
To remove Windows Maintenance Guard spyware you must block Windows Maintenance Guard sites, stop and remove processes, unregister DLL files, search and delete all other Windows Maintenance Guard files and registry utility. Follow the Windows Maintenance Guard detection and removal instructions below.
The most typical software removal method is to remove Windows Maintenance Guard by using "Add or Remove Programs" service. However there may be hidden Windows Maintenance Guard files, running processes and registries in your computer, so Windows Maintenance Guard may recreate all other files after reboot.
Windows Maintenance Guard manual removal instructions
Stop and remove Windows Maintenance Guard processes:
[3 random symbols].exe
[4 random symbols].exe
Read more how to kill Windows Maintenance Guard processes
Locate and delete Windows Maintenance Guard registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-6-18_7"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "idhsudrgrf"
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Anti-Virus Professional.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avnt.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\escanv95.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbamservice.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\npf40_tw_98_nt_me_2k.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\procexplorerv1.0.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\spoolcv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vsmain.exe
Read more how to delete Windows Maintenance Guard registry entries
Download RegistryBooster 2010 to scan errors caused by Windows Maintenance Guard
Search and unregister Windows Maintenance Guard DLL libraries:
NPSWF32.dll
Read more how to unregister Windows Maintenance Guard DLL files
Detect and delete other Windows Maintenance Guard files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[3 random symbols].exe
%AppData%\Protector-[4 random symbols].exe
%AppData%\result.db
%AppData%\1st$0l3th1s.cnf
We strongly recommend you to use spyware remover to track Windows Maintenance Guard and automaticaly remove Windows Maintenance Guard processes, registries and files as well as other spyware threats.


