How to remove Additional Guard
Monday, November 23rd, 2009 at 7:38 amHome » Rogue Antispyware » Additional Guard
Additional Guard description
Additional Guard is the worst application you can get for a computer protection. First of all, it‘s not a security tool, and second, it‘s a malware. Instead of helping you to fight infections, it makes the compromised machine open to other malware.
AdditionalGuard is availabale for manual download on several fraudulent websites but it is often installed by trojans without users permissions. It brings loads of annoying pop-ups urging to pay for using the tool. Unfortunately, Additional Guard is able to imitate system scan and security alerts. With tricks like those it makes an impression of legitimate application and this leads to purchasing the software. Avoid AdditionalGuard fraud and remove it as soon as possible.
Here are some of the fabricated alerts:
System alert!
Suspicious software which may be malicious has been
detected on your PC. Click here to remove this threat
immediately using Additional Guard.
System message
Your PC may still infected with dangerous viruses.
Additional Guard protection is needed to prevent data loss
and avoid theft of your personal data and credit card details.
Click here to activate protection.
Warning! Virus Detected
Threat detected: Trojan-PSW.Win32.Dripper
Get rid of Additional Guard
Additional Guard is a Rogue Antispyware software
How to manually remove Additional Guard
To remove Additional Guard spyware you must block Additional Guard sites, stop and remove processes, unregister DLL files, search and delete all other Additional Guard files and registry utility. Follow the Additional Guard detection and removal instructions below.
The most typical software removal method is to remove Additional Guard by using "Add or Remove Programs" service. However there may be hidden Additional Guard files, running processes and registries in your computer, so Additional Guard may recreate all other files after reboot.
Additional Guard manual removal instructions
Stop and remove Additional Guard processes:
ppal.exe
FS.exe
exec.exe
eb.exe
WI339.exe
Read more how to kill Additional Guard processes
Locate and delete Additional Guard registry entries:
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_e0ebf.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:117fc3395e69e29f71abba93a68c4181_7]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "99660903"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Additional Guard"
Read more how to delete Additional Guard registry entries
Download RegistryBooster 2010 to scan errors caused by Additional Guard
Search and unregister Additional Guard DLL libraries:
energy.dll
ddv.dll
cid.dll
mozcrt19.dll
sqlite3.dll
Read more how to unregister Additional Guard DLL files
Detect and delete other Additional Guard files:
c:\Documents and Settings\All Users\Application Data\117fc
c:\Documents and Settings\All Users\Application Data\117fc\WI339.exe
c:\Documents and Settings\All Users\Application Data\117fc\WINAG.ico
c:\Documents and Settings\All Users\Application Data\117fc\2414.mof
c:\Documents and Settings\All Users\Application Data\117fc\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\117fc\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\117fc\Quarantine Items
c:\Documents and Settings\All Users\Application Data\117fc\WINAGSys
c:\Documents and Settings\All Users\Application Data\117fc\WINAGSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\WINAGSys
c:\Documents and Settings\All Users\Application Data\WINAGSys\winag.cfg
%UserProfile%\Application Data\Additional Guard
%UserProfile%\Application Data\Additional Guard\cookies.sqlite
%UserProfile%\Application Data\Additional Guard\Instructions.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Additional Guard.lnk
%UserProfile%\Desktop\Additional Guard.lnk
%UserProfile%\Start Menu\Additional Guard.lnk
%UserProfile%\Start Menu\Programs\Additional Guard.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
%UserProfile%\Recent\ANTIGEN.drv
%UserProfile%\Recent\ANTIGEN.tmp
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\eb.drv
%UserProfile%\Recent\eb.exe
%UserProfile%\Recent\energy.dll
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\exec.exe
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\fan.drv
%UserProfile%\Recent\FS.drv
%UserProfile%\Recent\FS.exe
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\PE.sys
%UserProfile%\Recent\ppal.exe
We strongly recommend you to use spyware remover to track Additional Guard and automaticaly remove Additional Guard processes, registries and files as well as other spyware threats.
