GuardWWW
February 3, 2010 Threat level:
(7 / 10)
GuardWWW description
GuardWWW is one of the countless rogue anti-spyware applications coming from the WiniSoft malware family. Just like the other malicious programs developed by the creators of the WiniSoft series, GuardWWW tries to sell itself as a legitimate security software. GuardWWW is distributed online and downloaded by trojans which also install the application and its components.
In order to achieve its goal – get your money, GuardWWW starts every time you launch your computer therefore reducing your system's performance. It displays fake security scans and their reports which claim to have found loads of infections and security threats. GuardWWW also displays fraudulent warning messages about non-existent security issues:
Security Center Alert!
Infiltration alert! Your computer being attacked by an Internet Virus. It could be a password-stealing attack, a trojan-dropper or simular. Do you want GuardWWW to block this attack?
Spyware Alert!
Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of GuardWWW and remove spyware threats from your PC.
If you receive one of these alerts, don't take them for granted. GuardWWW tries to scare its victims and then sell them the “solution” – GuardWWW software. The best way to deal with this parasite and avoid serious system problems which it may cause, is to remove GuardWWW upon detection.
GuardWWW websites
guardwww.com Learn how to block rogue websitesNew processes created
2z5dow9loader222.exeuninstall.exe
GuardWWW.exe Learn how to remove malicious processes
New GuardWWW registry entries created
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "GuardWWW"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GuardWWW
HKEY_LOCAL_MACHINE\SOFTWARE\GuardWWW
HKEY_CURRENT_USER\Software\GuardWWW Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries
New files and directories created
c:\WINDOWS\system32\2z593spy3505.dllc:\WINDOWS\10247not-5-vi9us2zd.dll
c:\WINDOWS\system32\2z55vir2951.ocx
c:\WINDOWS\10z7worm559.ocx
c:\WINDOWS\10399zroj555.cpl
c:\WINDOWS\system32\2z5dow9loader222.exe
c:\WINDOWS\system32\.exe
c:\Documents and Settings\All Users\Start Menu\Programs\GuardWWW\3 Uninstall.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\GuardWWW\2 Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\GuardWWW\1 GuardWWW.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\GuardWWW
c:\Documents and Settings\All Users\Desktop\GuardWWW.lnk
c:\Program Files\GuardWWW Software\GuardWWW\main_config.xml
c:\Program Files\GuardWWW Software\GuardWWW\uninstall.exe
c:\Program Files\GuardWWW Software\GuardWWW\GuardWWW.exe
c:\Program Files\GuardWWW Software\GuardWWW
c:\Program Files\GuardWWW Software Learn how to unregister malicious DLL files
How to remove GuardWWW
To remove GuardWWW manually you must block rogue GuardWWW related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious GuardWWW files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.