Home » News » Rogue Antispyware » Remove Dr. Guard, Dr. Guard Removal Guide

Remove Dr. Guard, Dr. Guard Removal Guide

By Gina on March 2, 2010 | Rogue Antispyware Remove Dr. Guard, Dr. Guard Removal Guide

Dr. Guard is a malware from the same family as Paladin Antivirus. It spreads via trojan which enters the system and then creates a backdoor for Dr. Guard to sneak. Once your computer is started bogus system starts its fabricated scans and show false results. All the warnings displayed on your PC's desktop is fraudulent. Do not fall for this blatant scam.

The parasite also redirects browser to deceptive websites that sell the program. It is not worth paying for this illegal security tool. It is only imitation of security software and it is not able to provide any actual computer security service. When you notice the fake your only solution is to terminate this malicious program. Choose the decent anti-spyware program and kill the parasite immediately.

New processes created

drguard.exe
uninstall.exe
asr64_ldm.exe Learn how to remove malicious processes

New Dr. Guard registry entries created

HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_LOCAL_MACHINE\SOFTWARE\Dr. Guard
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Dr. Guard
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Dr. Guard"
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

c:\Documents and Settings\[Username]\Desktop\Dr. Guard Support.lnk
c:\Documents and Settings\[Username]\Desktop\Dr. Guard.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\About.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Activate.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Buy.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Dr. Guard Support.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Dr. Guard.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Scan.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Settings.lnk
c:\Documents and Settings\[Username]\Start Menu\Programs\Dr. Guard\Update.lnk
c:\Documents and Settings\[Username]\Application Data\Microsoft\Internet Explorer\Quick Launch\Dr. Guard.lnk
c:\Program Files\Dr. Guard
c:\Program Files\Dr. Guard\about.ico
c:\Program Files\Dr. Guard\activate.ico
c:\Program Files\Dr. Guard\buy.ico
c:\Program Files\Dr. Guard\drg.db
c:\Program Files\Dr. Guard\drgext.dll
c:\Program Files\Dr. Guard\drghook.dll
c:\Program Files\Dr. Guard\drguard.exe
c:\Program Files\Dr. Guard\help.ico
c:\Program Files\Dr. Guard\scan.ico
c:\Program Files\Dr. Guard\settings.ico
c:\Program Files\Dr. Guard\splash.mp3
c:\Program Files\Dr. Guard\uninstall.exe
c:\Program Files\Dr. Guard\update.ico
c:\Program Files\Dr. Guard\virus.mp3
%Temp%\asr64_ldm.exe Learn how to unregister malicious DLL files

How to remove Dr. Guard

To remove Dr. Guard manually you must block rogue Dr. Guard related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious Dr. Guard files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

Windows 7 Antispyware 2012 removal tutorial

Windows 7 Antispyware 2012 is a fake computer protection application which spreads via trojan horse and is a copy of Win 7 Antispyware 2012 scam as well. The parasite is distributed online and is usually difficult to avoid if one does not employ reputable security service. Once installed it will display false system security warnings and the will prompt you buy a "full" version of this program to remove threats that don't even exist. For example:Malware Intrusion! Read more.


News categories

Latest news