Remove Windows Guard Solutions. Removal instructions
Windows Guard Solutions is a rogue security program that displays fake security alerts and reports non-existent malware infections to trick you into purchasing the bogus software. Once installed, this fake anti-spyware program will imitate a system scan and report critical spyware and trojans infections as well as some system errors. Then it will prompt you to pay for a full version of the program to remove supposedly found infections from your computer. Because it’s a scam you can safely ignore scan results and remove Windows Guard Solutions from your computer as soon as possible using legit antimalware software.
Windows Guard Solutions is promoted mostly via Trojans, browser hijackers, fake online virus scanners and hacked websites. Usually, Trojans display fake security warnings and suggest you to active Windows Guard Solutions in order to ensure full system protection. Hacked websites may download and install malicious software on your computer without your knowledge. That’s why it’s very important to use reliable antivirus software while browsing the web. While running, the rogue security application will constantly display bogus system notifications and fake security alerts about insecure internet connection or supposedly harmful files found on your PC. You will see fake security alerts with the following or similar text:
Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
Windows Guard Solutions will hijack your web browser and redirect you to websites that may be infected or they can simply flood you with various ads. It may also hijack all search results and display fake notifications about possible Internet attacks and security threats. You will probably notice that your computer is slower than usual, that’s because it uses a lot of CPU resource. As you can see Windows Guard Solutions is nothing more but a scam. Do not purchase this program. Instead, please use the removal guide below to remove Windows Guard Solutions from your computer using recommended malware removal tool. If you have purchased it, contact your Credit Card Company or bank immediately and dispute the charges.
Windows Guard Solutions snapshot:
Automatic Windows Guard Solutions removal:
(2012-04-18 03:14:57)
(2012-04-18 03:14:57)
(2012-04-18 03:14:57)
Windows Guard Solutions manual removal:
Kill processes:
Inspector-[rnd].exe Protector-[rnd].exe
how to kill malicious processes
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
how to remove registry entries
Delete files:
%AppData%\Inspector-[rnd].exe %AppData%\Protector-[rnd].exe
how to remove harmful files
Information updated: 2012-04-18 03:20:56