Remove Windows Stability Guard. Removal instructions
Windows Stability Guard is a rogue anti-spyware program that is advertised through the use of Trojans and fake online virus scanners that display alerts claiming that your computer is infected with viruses. Once installed, this rogue will pretend to scan your computer for malware and then display results stating that your machine is infected with malicious software. The infected files will not be removed until you purchase the program. However, you shouldn’t do this because Windows Stability Guard reports false system security threats and non-existent malware files to scare you into purchasing completely useless software. Found infections simply do not exist on your computer. It goes without saying that you have to remove Windows Stability Guard from your computer as soon as possible. To remove this virus, please use our removal guide below.
While this fake program is running, it will display fake security alerts and pop-ups from the Windows task manager. Some of those fake security alerts read:
Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Windows Stability Guard will also hijack web browsers and block legitimate anti-spyware programs to protect itself from being removed. Users with infected computers will be redirected to that site very often to purchase the program. As you can see, this program is nothing more but a scam. Remove Windows Stability Guard virus from your computer as soon as possible using our automatic removal tool. If it blocks malware removal tools and you can’t run task manager, reboot your computer in safe mode with networking and run removal tool once again.
Automatic Windows Stability Guard removal:
(2012-02-29 05:46:07)
(2012-02-29 05:46:07)
(2012-02-29 05:46:07)
Windows Stability Guard manual removal:
Kill processes:
Inspector-[rnd].exe
how to kill malicious processes
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
how to unregister malicious DLLs
Delete files:
%appdata%\npswf32.dll %appdata%\Inspector-[3 random characters].exe %desktopdir%\Windows Stability Guard.lnk %appdata%\result.db %StartMenu%\Programs\Windows Stability Guard.lnk
how to remove harmful files
Information updated: 2012-02-29 05:46:07