How to remove Windows Additional Guard
Monday, September 7th, 2009 at 4:45 amHome » Rogue Antispyware » Windows Additional Guard
Windows Additional Guard description
Windows Additional Guard is an additional tool to bring your money to scammers. The program urges to pay either $49.95 or $69.95 or $89.95 for deleting viruses detected on a PC. The infections detected by Windows AdditionalGuard are made-up. And after purchasing the full version you get absolutely nothing.
WindowsAdditional Guard is promoted on windowsadditionalguard.com and similar fake online security centers but it’s more often distributed on infected web sources that install the program automatically. WindowsAdditionalGuard demands paying for using the tool, although all it can do is loading pop-ups and making a computer run slower. In some cases Windows Additional Guard may hijack web browser and prevent people from running real security tools.
Get rid of Windows Additional Guard
Windows Additional Guard is a Rogue Antispyware software
How to manually remove Windows Additional Guard
To remove Windows Additional Guard spyware you must block Windows Additional Guard sites, stop and remove processes, unregister DLL files, search and delete all other Windows Additional Guard files and registry utility. Follow the Windows Additional Guard detection and removal instructions below.
The most typical software removal method is to remove Windows Additional Guard by using "Add or Remove Programs" service. However there may be hidden Windows Additional Guard files, running processes and registries in your computer, so Windows Additional Guard may recreate all other files after reboot.
Windows Additional Guard manual removal instructions
Block Windows Additional Guard sites:
windowsadditionalguard.com
Read more how to block Windows Additional Guard sites
Stop and remove Windows Additional Guard processes:
WI345d.exe
exec.exe
ppal.exe
Read more how to kill Windows Additional Guard processes
Locate and delete Windows Additional Guard registry entries:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "967907703"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Additional Guard"
Read more how to delete Windows Additional Guard registry entries
Download RegistryBooster 2010 to scan errors caused by Windows Additional Guard
Search and unregister Windows Additional Guard DLL libraries:
mozcrt19.dll
sqlite3.dll
ddv.dll
energy.dll
FS.dll
Read more how to unregister Windows Additional Guard DLL files
Detect and delete other Windows Additional Guard files:
%Documents and Settings%\All Users\Application Data\345d567
%Documents and Settings%\All Users\Application Data\345d567\578.mof
%Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
%Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
%Documents and Settings%\All Users\Application Data\345d567\WI345d.exe
%Documents and Settings%\All Users\Application Data\345d567\WINAG.ico
%Documents and Settings%\All Users\Application Data\345d567\WINAGSys
%Documents and Settings%\All Users\Application Data\345d567\WINAGSys\vd952342.bd
%Documents and Settings%\All Users\Application Data\WINAGSys
%Documents and Settings%\All Users\Application Data\WINAGSys\winag.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Additional Guard.lnk
%UserProfile%\Application Data\Windows Additional Guard
%UserProfile%\Application Data\Windows Additional Guard\cookies.sqlite
%UserProfile%\Desktop\Windows Additional Guard.lnk
%UserProfile%\Recent\ANTIGEN.tmp
%UserProfile%\Recent\cb.exe
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\dudl.drv
%UserProfile%\Recent\energy.dll
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\exec.exe
%UserProfile%\Recent\fan.drv
%UserProfile%\Recent\FS.dll
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\SICKBOY.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\Windows Additional Guard.lnk
%UserProfile%\Start Menu\Programs\Windows Additional Guard.lnk
%Program Files%\Mozilla Firefox\searchplugins\search.xml
We strongly recommend you to use spyware remover to track Windows Additional Guard and automaticaly remove Windows Additional Guard processes, registries and files as well as other spyware threats.
Windows Additional Guard
Trackbacks
- Remove Omega Antivir, OmegaAntivir removal help
- Remove Windows Enterprise Defender, WindowsEnterpriseDefender removal
Leave a Reply
Subscribe
Search
Categories
- Adware
- Backdoor
- Browser Helper Object
- Browser Hijacker
- Fake warning messages
- Keylogger
- Malicious domains
- Remote Administration Tool (RAT)
- Rogue Antispyware
- Tracking Cookie
- Trojan
- Worm
Latest spyware threats
- Windows 7 Antispyware 2012
- WinMaximizer
- Slow-PCFighter
- AV Security Essentials
- Smart Anti-Malware Protection
- Internet Security
- PC Clean Pro
- Windows Vista Antivirus 2012
- Malware Protection Center
- Antivirus Smart Protection
- Internet Security 2012
- Smart Internet Protection 2012
- Smart Protection 2012
- Internet Security Guard
- Home Security Essentials
Recently commented
- Antivirmore.com
- Webantispy.com
- Antivirsword.com
- Internet Security
- Security Shield 2011
- Net Protector AntiVirus 2010
- Internet Security Guard
- Vista Antivirus 2012
- Vista Home Security 2012
- Win 7 Anti-Virus 2011
- Vista Antispyware 2012
Malicious domains
- iCityFind
- Antivirsword.com
- Webantispy.com
- Antivirmore.com
- Antivirglass.com
- Oksave9.co.cc
- Smartsecadv.com
- AV-look.com
- Profantivir.com
- Customwebblacklist.com
Fake warning messages
- Kaspersky Internet Security 2011 Enhanced Protection Mode
- Comodo Enhanced Protection Mode
- Microsoft Security Essentials Enhanced Protection Mode
- McAfee Enhanced Protection Mode
- Norton Antivirus Enhanced Protection Mode
- ESET Smart Security Enhanced Protection Mode
- Microsoft Defender Enhanced Protection Mode
- Avast Enhanced Protection Mode
- Fake “Windows – No Disk” alert
- “Low Disk Space” counterfeit warning
Tutorials
- Contact Us
- How to block malicious websites using HOSTS file?
- How to delete registry entries?
- How to download and install Spyware Doctor
- How to kill malicious processes?
- How to recognize a rogue security program?
- How to recognize a rogue website?
- How to unregister DLL files?
- Signs of browser hijacker infection
Archive
- February 2012
- January 2012
- December 2011
- November 2011
- October 2011
- September 2011
- August 2011
- July 2011
- June 2011
- May 2011
- April 2011
- March 2011
- February 2011
- January 2011
- December 2010
- November 2010
- October 2010
- September 2010
- August 2010
- July 2010
- June 2010
- May 2010
- April 2010
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- October 2008
December 6th, 2009 at 2:46 pm
These instructions and downloads are very nice for those that are running WINDOWS XP NOT FOR VISTA AS THERE IS NO “DOCUMENTS AND SETTING” IN VISTA. Also if you know anything about additional guard, it effects your access to the internet, so downloading anything is IMPOSSIBLE. I’m so tired of all these websites giving the same old removal steps, but insist that downloading their virus removal tools works better. I CAN NOT CONNECT TO THE INTERNET YOU IDIOTS!
Reply
Luciana Reply:
December 7th, 2009 at 12:21 am
You can download removal tools on another computer and then copy install files to your machine using an USB key. However, anti-spyware is not necessary to deleting Additional Guard because you can delete this malware manually.
Reply
jacque Reply:
December 7th, 2009 at 9:52 am
Thank you for your suggestion Luciana, but all the manual removal steps as indicated above, require met to access “Documents and Settings”, “all users” or “application data” which don’t exist in Vista so this renders these instructions completely useless to me! I have seen these instructions on many websites, but it only works for Windows.
What is a USB Key? I know what a USB connection and cable are. Do you mean I can use a usb cable and connect to both computers. Would the other computer show up as another drive. Also, can I download it to a disk? Would it be a bootable file?
%Documents and Settings%\All Users\Application Data\345d567
%Documents and Settings%\All Users\Application Data\345d567\578.mof
%Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
%Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
%Documents and Settings%\All Users\Application Data\345d567\WI345d.exe
%Documents and Settings%\All Users\Application Data\345d567\WINAG.ico
%Documents and Settings%\All Users\Application Data\345d567\WINAGSys
%Documents and Settings%\All Users\Application Data\345d567\WINAGSys\vd952342.bd
%Documents and Settings%\All Users\Application Data\WINAGSys
%Documents and Settings%\All Users\Application Data\WINAGSys\winag.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Additional Guard.lnk
%UserProfile%\Application Data\Windows Additional Guard
%UserProfile%\Application Data\Windows Additional Guard\cookies.sqlite
%UserProfile%\Desktop\Windows Additional Guard.lnk
%UserProfile%\Recent\ANTIGEN.tmp
%UserProfile%\Recent\cb.exe
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\dudl.drv
%UserProfile%\Recent\energy.dll
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\exec.exe
%UserProfile%\Recent\fan.drv
%UserProfile%\Recent\FS.dll
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\SICKBOY.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\Windows Additional Guard.lnk
%UserProfile%\Start Menu\Programs\Windows Additional Guard.lnk
%Program Files%\Mozilla Firefox\searchplugins\search.xml
Reply
Luciana Reply:
December 7th, 2009 at 11:27 pm
I’m sorry for the misunderstanding. By “USB key” I meant a thumb drive. The folders might be different but the files are the same. You can still use Windows search to locate and delete the files.