Remove Dr. Guard. Description and removal instructions
 [Figure 1. Dr. Guard graphical user interface] While running, Dr. Guard will display fake security warnings claiming that your computer is infected with trojan viruses such as Virus Chin09.Win or that you are under attack by an Internet virus. Of course, that's not truth. The only real threat is DrGuard itself. What is more, this fake program, will impersonate Windows Security Center and state that you should activate (buy) Dr.Guard to protect yourself from possible threats. It can be rather difficult to tell if such alerts are false or not. This one promotes the rogue program so it's obviously fake. But note that other malicious software use the same tactics as well to trick users into thinking that their computer are infected. Some of the fake Dr. Guard alerts that you will likely see if you PC is infected:  [Figure 2. Dr. Guard - fake alert] Defenseless OS: Windows 2000/XP/Vista Description: Spyware. Blocks access to computer. Attacks porn sites visitors. Protection: Click the balloon to install antivirus software. There are some serious security threats detected on your computer: viruses, trojans, keyloggers, exploits etc. Your computer and all your personal data are in serious danger. Protection: Click the balloon to install antivirus software. Once active, the rogue program will attempt yo uninstall legitimate anti-virus and anti-malware programs from your computer. It will try to uninstall NOD32 Antivirus, AVG, Avira Antivir, Avast! and other well known products. It will state that your antivirus program is infected and should be uninstalled. Don't be fooled. That's a part of Dr Guard scam. Also note that this scareware can come bundled with TDSS rootkit. If so, then it will probably block executable files and security related websites. That's why we strongly recommend you to use an automatic removal tool in order to remove this virus because manual removal guide was written for Dr. Guard infection only. And finally, if you inadvertently purchased this bogus program then you should contact your credit card company and dispute the charges. Related files: drgext.dll, drghook.dll, drguard.exe, settings.ico, splash.mp3, Uninstall.exe, Dr. Guard Support.lnk, Dr. Guard.lnk, About.lnk, Activate.lnk, Buy.lnk, Scan.lnk, Settings.lnk, about.ico, activate.ico, drg.db, update.ico, virus.mp3 Dr. Guard properties: • Changes browser settings • Shows commercial adverts • Connects itself to the internet • Stays resident in background Automatic Dr. Guard removal:remover for Dr. Guard
Dr. Guard manual removal:Kill processes:drguard.exe asr64_ldm.exe Delete registry values: HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SimpleShlExt HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000} HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt HKEY_LOCAL_MACHINE\SOFTWARE\Dr. Guard HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Dr. Guard HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Dr. Guard" HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1" Unregister DLLs: drgext.dll drghook.dll Delete files: drgext.dll drghook.dll drguard.exe settings.ico splash.mp3 uninstall.exe Dr. Guard Support.lnk Dr. Guard.lnk About.lnk Activate.lnk Buy.lnk Dr. Guard Support.lnk Scan.lnk Settings.lnk Quick Launch\\Dr. Guard.lnk about.ico activate.ico drg.db update.ico virus.mp3 Delete directories: C:\Program Files\Dr. Guard C:\Documents and Settings\[UserName]\Start Menu\Programs\Dr. Guard %Temp%\asr64_ldm.exe Other programs to remove Dr. Guard:• Malwarebytes Anti Malware - Review - Download• Malwarebytes Anti Malware - Review - Download • Windows Defender - Review - Download Information added: 01/03/10 Information updated: 01/03/10 Additional resources related to Dr. Guard:Attention: If you know or you have a website or page about Dr. Guard removal, feel free to add a link to this list: add url
more resources Post Comment:Attention: Use this form only if you have additional information about Dr. Guard parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
|
Latest spyware news:
 TDSS or Alureon rootkit attacks 64-bit computers! Anti-virus software do a poor job of detecting exploits Eliminate annoying "Open with..." dialog box Attention! Norton Update Center is announced to be vulnerable for cross-site scripting, redirects and html injections! Attention! Nonexistent video on Facebook! A New Type of Phishing Attack - Tabnapping McAfee False Detection causes significant Window XP performance issues Three men responsible for the largest Spanish “botnet” Mariposa have been arrested How to Keep Your Credentials Save StopBadware is Fighting Against Cyber Criminals as a Non-Profit Organization Subscribe to news 
Similar parasites:
|
FORUM:
HELP:
