Home » News » Rogue Antispyware » How to Remove Windows Additional Guard, Windows Additional Guard Removal Help

How to Remove Windows Additional Guard, Windows Additional Guard Removal Help

By Gina on September 7, 2009 | Rogue Antispyware How to Remove Windows Additional Guard, Windows Additional Guard Removal Help

Windows Additional Guard is a software advertised online as a reliable security application that protects the system and is able to clean the computer from viruses and other infections. However, it is very important for every internet user to know that WindowsAdditionalGuard is a scam that is meant to trick them into purchasing a non-existent security software.

Once WindowsAdditional Guard gets inside the system it imitates scanning the computer for viruses and displays misleading results that report numerous threats being found. It also generates fake security warning messages, hijacks the internet browser and might even prevent legitimate security programs from running. Having Windows AdditionalGuard on one's system might cause some serious computer problems therefore it is strongly advised to remove this malware as quickly as possible.

Windows Additional Guard websites

windowsadditionalguard.com Learn how to block rogue websites

New processes created

WI345d.exe
exec.exe
ppal.exe Learn how to remove malicious processes

New Windows Additional Guard registry entries created

HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "967907703"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Additional Guard" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

%Documents and Settings%\All Users\Application Data\345d567
%Documents and Settings%\All Users\Application Data\345d567\578.mof
%Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
%Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
%Documents and Settings%\All Users\Application Data\345d567\WI345d.exe
%Documents and Settings%\All Users\Application Data\345d567\WINAG.ico
%Documents and Settings%\All Users\Application Data\345d567\WINAGSys
%Documents and Settings%\All Users\Application Data\345d567\WINAGSys\vd952342.bd
%Documents and Settings%\All Users\Application Data\WINAGSys
%Documents and Settings%\All Users\Application Data\WINAGSys\winag.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Additional Guard.lnk
%UserProfile%\Application Data\Windows Additional Guard
%UserProfile%\Application Data\Windows Additional Guard\cookies.sqlite
%UserProfile%\Desktop\Windows Additional Guard.lnk
%UserProfile%\Recent\ANTIGEN.tmp
%UserProfile%\Recent\cb.exe
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\dudl.drv
%UserProfile%\Recent\energy.dll
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\exec.exe
%UserProfile%\Recent\fan.drv
%UserProfile%\Recent\FS.dll
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\SICKBOY.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\Windows Additional Guard.lnk
%UserProfile%\Start Menu\Programs\Windows Additional Guard.lnk
%Program Files%\Mozilla Firefox\searchplugins\search.xml Learn how to unregister malicious DLL files

How to remove Windows Additional Guard

To remove Windows Additional Guard manually you must block rogue Windows Additional Guard related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious Windows Additional Guard files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

System Protection Tools removal guide

System Protection Tools removal guide

System Protection Tools is a rogue anti-spyware tool which spreads via trojan horse. Trojan comes to the system via its vulnerabilities and leaves a backdoor for System Protection Tools to sneak. The parasite comes to the system without user’s knowledge and consent. Read more.


News categories

Latest news