Home » News » Rogue Antispyware » Remove Dr. Guard, Dr. Guard Removal Guide

Remove Dr. Guard, Dr. Guard Removal Guide

By Gina on March 2, 2010 | Rogue Antispyware Remove Dr. Guard, Dr. Guard Removal Guide

Dr. Guard is a malware from the same family as Paladin Antivirus. It spreads via trojan which enters the system and then creates a backdoor for Dr. Guard to sneak. Once your computer is started bogus system starts its fabricated scans and show false results. All the warnings displayed on your PC's desktop is fraudulent. Do not fall for this blatant scam.

The parasite also redirects browser to deceptive websites that sell the program. It is not worth paying for this illegal security tool. It is only imitation of security software and it is not able to provide any actual computer security service. When you notice the fake your only solution is to terminate this malicious program. Choose the decent anti-spyware program and kill the parasite immediately.

New processes created

drguard.exe
uninstall.exe
asr64_ldm.exe Learn how to remove malicious processes

New Dr. Guard registry entries created

HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_LOCAL_MACHINE\SOFTWARE\Dr. Guard
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Dr. Guard
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Dr. Guard"
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

c:\Documents and Settings\[Username]\Desktop\Dr. Guard Support.lnk
c:\Documents and Settings\[Username]\Desktop\Dr. Guard.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\About.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Activate.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Buy.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Dr. Guard Support.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Dr. Guard.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Scan.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Settings.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Update.lnk
c:\Documents and Settings\[Username]\Application Data\Microsoft\Internet Explorer\Quick Launch\Dr. Guard.lnk
c:\Program Files\Dr. Guard
c:\Program Files\Dr. Guard\about.ico
c:\Program Files\Dr. Guard\activate.ico
c:\Program Files\Dr. Guard\buy.ico
c:\Program Files\Dr. Guard\drg.db
c:\Program Files\Dr. Guard\drgext.dll
c:\Program Files\Dr. Guard\drghook.dll
c:\Program Files\Dr. Guard\drguard.exe
c:\Program Files\Dr. Guard\help.ico
c:\Program Files\Dr. Guard\scan.ico
c:\Program Files\Dr. Guard\settings.ico
c:\Program Files\Dr. Guard\splash.mp3
c:\Program Files\Dr. Guard\uninstall.exe
c:\Program Files\Dr. Guard\update.ico
c:\Program Files\Dr. Guard\virus.mp3
%Temp%\asr64_ldm.exe Learn how to unregister malicious DLL files

How to remove Dr. Guard

To remove Dr. Guard manually you must block rogue Dr. Guard related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious Dr. Guard files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

Delete Windows Safety Maintenance fraud

Delete Windows Safety Maintenance fraud

Windows Safety Maintenance is a rogue anti-spyware program which spreads via trojan. Once the trojan is released Windows Safety Maintenance stars fake scans and shows fraudulent results. It puts many efforts in trying to trick user into believing their PC is infected. Read more.


News categories

Latest news