Home » News » Rogue Antispyware » Remove GuardWWW, GuardWWW Removal

Remove GuardWWW, GuardWWW Removal

By Bryan on February 3, 2010 | Rogue Antispyware Remove GuardWWW, GuardWWW Removal

GuardWWW is one of the countless rogue anti-spyware applications coming from the WiniSoft malware family. Just like the other malicious programs developed by the creators of the WiniSoft series, GuardWWW tries to sell itself as a legitimate security software. GuardWWW is distributed online and downloaded by trojans which also install the application and its components.

In order to achieve its goal – get your money, GuardWWW starts every time you launch your computer therefore reducing your system's performance. It displays fake security scans and their reports which claim to have found loads of infections and security threats. GuardWWW also displays fraudulent warning messages about non-existent security issues:

Security Center Alert!
Infiltration alert! Your computer being attacked by an Internet Virus. It could be a password-stealing attack, a trojan-dropper or simular. Do you want GuardWWW to block this attack?

Spyware Alert!
Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of GuardWWW and remove spyware threats from your PC.

If you receive one of these alerts, don't take them for granted. GuardWWW tries to scare its victims and then sell them the “solution” – GuardWWW software. The best way to deal with this parasite and avoid serious system problems which it may cause, is to remove GuardWWW upon detection.

GuardWWW websites

guardwww.com Learn how to block rogue websites

New processes created

2z5dow9loader222.exe
uninstall.exe
GuardWWW.exe Learn how to remove malicious processes

New GuardWWW registry entries created

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "GuardWWW"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GuardWWW
HKEY_LOCAL_MACHINE\SOFTWARE\GuardWWW
HKEY_CURRENT_USER\Software\GuardWWW Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

c:\WINDOWS\system32\2z593spy3505.dll
c:\WINDOWS\10247not-5-vi9us2zd.dll
c:\WINDOWS\system32\2z55vir2951.ocx
c:\WINDOWS\10z7worm559.ocx
c:\WINDOWS\10399zroj555.cpl
c:\WINDOWS\system32\2z5dow9loader222.exe
c:\WINDOWS\system32\.exe
c:\Documents and Settings\All Users\Start Menu\Programs\GuardWWW\3 Uninstall.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\GuardWWW\2 Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\GuardWWW\1 GuardWWW.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\GuardWWW
c:\Documents and Settings\All Users\Desktop\GuardWWW.lnk
c:\Program Files\GuardWWW Software\GuardWWW\main_config.xml
c:\Program Files\GuardWWW Software\GuardWWW\uninstall.exe
c:\Program Files\GuardWWW Software\GuardWWW\GuardWWW.exe
c:\Program Files\GuardWWW Software\GuardWWW
c:\Program Files\GuardWWW Software Learn how to unregister malicious DLL files

How to remove GuardWWW

To remove GuardWWW manually you must block rogue GuardWWW related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious GuardWWW files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

Remove Win7 AV, Win7 AV removal

Remove Win7 AV, Win7 AV removal

Win7 AV is the latest rogue application promoted on win7av.com website. It should be avoided because the program is malicious and fraudulent as brower hijacker. Malware spreads via trojan which comes to the system through its flaws. The parasite downloads and installs itself automatically without user’s knowledge and consent. Once active it starts to scan your computer and displays fabricated security alerts. Read more.


News categories

Latest news