Severity scale  
  (70/100)

Additional Guard. How to Remove? (Uninstall Guide)

removal by - -   Also known as AdditionalGuard | Type: Rogue Antispyware
Additional Guard is a misleading anti-spyware application, fake spyware removal tool. Basically, it is just a rename of the rogue anti-spyware application called Windows Additional Guard. As its predecessor, AdditionalGuard uses false scan results and fake security alerts/notifications to scare you into thinking that your computer is infected and that you should purchase the program to remove supposed infections/security threats. Obviously, this is nothing more but a scam. Do not buy this bogus software and uninstall Additional Guard from your computer upon detection.

Additional Guard graphical user interface
[Figure 1. Additional Guard graphical user interface]

Additional Guard infection may cause serious problems to the system. The rogue application is promoted via fake online scanners and misleading websites. It enters a computer with the help of Trojans that usually come from those fake online scanners. Trojans then download and install rogue application. Once installed, Additional Guard imitates several computer scans and states that your computer is baldy infected with spyware, adware, worms, Trojans and other malware. This parasite then claims that you must purchase AdditionalGuard in order to remove those infections, but the problems is that those infections do not actually exist. The real infections is Additional Guard itself.

Additionalguard.net - the home page of Additional Guard
[Figure 2. Additionalguard.net - the home page of Additional Guard]

The home page of this malicious software is additionalguard.net (can be other similar domains too). The website is potentially harmful because there are many false statements and fake reviews as well as the pay page of this bogus application. Do not visit this website. If you are constantly redirected to this website, your computer is likely infected. As wee have already said, do not purchase it! First of all, please use the removal guide below and remove Additional Guard files from your PC. Then scan your computer with a legitimate anti-spyware application to remove the remains or additionally downloaded malware. Related files: FS.exe, energy.dll, eb.exe, cookies.sqlite, sqlite3.dll, mozcrt19.dll

Additional Guard properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Additional Guard. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended remover to uninstall Additional Guard. You should confirm using free trial that it detects current version of parasite.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
STOPzilla
Tested and Confirmed! STOPzilla removes Additional Guard (2009-11-24 04:34:11)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Additional Guard (2009-11-24 04:34:11)
SpyHunter
We are testing SpyHunter's efficiency (2012-04-30 19:56)
STOPzilla
Tested and Confirmed! STOPzilla removes Additional Guard (2009-11-24 04:34:11)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Additional Guard (2009-11-24 04:34:11)
Webroot SecureAnywhere AntiVirus
Additional Guard screenshot
Additional Guard snapshot

Additional Guard manual removal

Kill processes:
WI339.exe
exec.exe
FS.exe
ppal.exe
Delete registry values:
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_e0ebf.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:117fc3395e69e29f71abba93a68c4181_7]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "99660903"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Additional Guard"
Unregister DLLs:
mozcrt19.dll
sqlite3.dll
cid.dll
ddv.dll
energy.dll

Delete files:
WI339.exe
WINAG.ico
2414.mof
mozcrt19.dll
sqlite3.dll
vd952342.bd
winag.cfg
cookies.sqlite
Instructions.ini
Additional Guard.lnk
search.xml
ANTIGEN.drv
ANTIGEN.tmp
cid.dll
CLSV.tmp
ddv.dll
eb.drv
eb.exe
energy.dll
energy.sys
exec.exe
exec.tmp
fan.drv
FS.drv
FS.exe
kernel32.drv
PE.sys
ppal.exe
Delete directories:
c:\Documents and Settings\All Users\Application Data\117fc
c:\Documents and Settings\All Users\Application Data\117fc\Quarantine Items
c:\Documents and Settings\All Users\Application Data\117fc\WINAGSys
c:\Documents and Settings\All Users\Application Data\WINAGSys
%UserProfile%\Application Data\Additional Guard

Geolocation of Additional Guard

Map reveals the prevalence of Additional Guard. Countries and regions that have been affected the most are: United States.

Information updated:

Comments on Additional Guard

0
0
<Guest>manik
remove additional guard.
0
0
<Guest>
Correction. Remove all Additional Guard from my computer immediately
0
0
<Guest>
You must remove all related software from my computer immediately.
0
0
<Guest>
pls. remove the additional guard from my pc thx.

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)