Remove PSGuard. Description and removal instructions

 
Title: PSGuard

Type: Malware
Severity scale:PSGuard severity is 70  (70 / 100)
 
PSGuard is a rogue anti-spyware program, typically installed using Trojans. When active, this program uses pop-ups, system notifications and falsified scan reports to scare the user into buying the full version, which is equally non-functional.

PSGuard is a scam: do NOT download or buy it, if you have it - remove it and block its domain using your HOSTS file.


Related files: intell32.exe, psguard.exe, psguardinstall.exe, core.dll, localization.dll, oleext.dll, oleext32.dll, wndsystem.dll, uninstiu.exe, wppp.html

PSGuard properties:
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

PSGuard snapshot:
PSGuard removal

Automatic PSGuard removal:

remover for PSGuard

PSGuard manual removal:

Kill processes:
intell32.exe, psguard.exe, psguardinstall.exe, uninstiu.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\intell32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run\PSGuard
HKEY_CLASSES_ROOT\CLSID\{15DC7116-E58E-4395-A45A-A1C99B17C030}
HKEY_CLASSES_ROOT\CLSID\{17E02586-A91D-4A9D-A74E-187B05DFFE6F}
HKEY_CLASSES_ROOT\CLSID\{1BD98DFD-2DA9-4C54-85D7-BE03A0F9C487}
HKEY_CLASSES_ROOT\CLSID\{1C94EA51-3800-4F08-B5DC-A5B67823FFEA}
HKEY_CLASSES_ROOT\CLSID\{20D1AF34-6E19-42D8-AF9F-BDFBE45C2454}
HKEY_CLASSES_ROOT\CLSID\{21E132C9-1F98-4151-BDAD-7D9B49C60A8E}
HKEY_CLASSES_ROOT\CLSID\{23F7AD29-F51A-4BA1-BE70-143B1CB25BD1}
HKEY_CLASSES_ROOT\CLSID\{2C59D5EC-6B91-4896-BD6F-5F121D87A7F8}
HKEY_CLASSES_ROOT\CLSID\{2F34E0E0-F0BB-477F-AFB8-509262FA0AD1}
HKEY_CLASSES_ROOT\CLSID\{357A87ED-3E5D-437D-B334-DEB7EB4982A3}
HKEY_CLASSES_ROOT\CLSID\{35ED274E-3F42-4A78-BBDC-3B7D73E85578}
HKEY_CLASSES_ROOT\CLSID\{3D74D140-F780-4AE3-8D6D-F8DC39107213}
HKEY_CLASSES_ROOT\CLSID\{49443D6E-CE4E-47A9-8DEB-F5774CE14984}
HKEY_CLASSES_ROOT\CLSID\{52034AD2-914C-4634-B375-9299631E5525}
HKEY_CLASSES_ROOT\CLSID\{7702C521-76AE-42C0-A181-3B5A96C2EEF7}
HKEY_CLASSES_ROOT\CLSID\{7ADDA344-1D36-4446-9F4B-B2351FB19EFD}
HKEY_CLASSES_ROOT\CLSID\{7D98221E-AF8F-4D29-8BB1-1DFABC288173}
HKEY_CLASSES_ROOT\CLSID\{9746B450-6064-4EC8-9480-72A289AA2237}
HKEY_CLASSES_ROOT\CLSID\{C5A40FCE-0A0F-40CA-985E-661C28B5B431}
HKEY_CLASSES_ROOT\CLSID\{C7F22879-7151-4C71-8C50-9557AFDA66C6}
HKEY_CLASSES_ROOT\CLSID\{CA5E7959-60B5-47B7-80AC-1606309733F3}
HKEY_CLASSES_ROOT\CLSID\{CEABF027-6CDC-4D47-ADF6-AC5D065826A6}
HKEY_CLASSES_ROOT\CLSID\{E0AA0493-C410-4CBD-B1DB-1723374FA8E0}
HKEY_CLASSES_ROOT\CLSID\{E5D78BD8-3874-4AA0-9D45-CFB79382C484}
HKEY_CLASSES_ROOT\CLSID\{F4B3E25A-33B4-4647-9A78-B627DDE211A6}
HKEY_CLASSES_ROOT\Interface\{08101C3E-6C90-439E-9734-6E4DD1B53B69}
HKEY_CLASSES_ROOT\Interface\{09B90087-4FFA-4A44-BE69-DA117A710F07}
HKEY_CLASSES_ROOT\Interface\{1449F89C-AD28-427A-97FF-1D5BD812EA43}
HKEY_CLASSES_ROOT\Interface\{1C08D3D0-1E04-4DDE-AB0A-75355EA2585E}
HKEY_CLASSES_ROOT\Interface\{206538F7-F98C-4A46-A7D4-4A37FCDC932B}
HKEY_CLASSES_ROOT\Interface\{20F8B70D-9F16-4DCB-8788-90A0498E46B9}
HKEY_CLASSES_ROOT\Interface\{28FEDB90-53C7-4928-994A-CEE782606507}
HKEY_CLASSES_ROOT\Interface\{2C462D06-3BA0-48BB-9282-BB6519FE86E9}
HKEY_CLASSES_ROOT\Interface\{3A350193-C7F7-4E10-B347-02FF4C3CC4E9}
HKEY_CLASSES_ROOT\Interface\{4723879B-8F52-4BE7-9994-626AFA539366}
HKEY_CLASSES_ROOT\Interface\{7B6A3434-8625-4ABF-B79D-09D98C2498C4}
HKEY_CLASSES_ROOT\Interface\{8B6C0168-BAAC-4C7C-911E-0132590F5661}
HKEY_CLASSES_ROOT\Interface\{8EC33B7D-9953-4EDB-ACE2-D4C105968601}
HKEY_CLASSES_ROOT\Interface\{A00E2305-7001-4200-BA00-5779F9A3E7D3}
HKEY_CLASSES_ROOT\Interface\{A20F5672-7486-4D27-BD2B-E555E4692C5F}
HKEY_CLASSES_ROOT\Interface\{A917B2F3-A9BF-477C-A0E3-0382D0376159}
HKEY_CLASSES_ROOT\Interface\{B26B5883-F15F-4283-B3D5-A1728077DE47}
HKEY_CLASSES_ROOT\Interface\{B803D266-A08D-4A4C-9604-6D35689ABE09}
HKEY_CLASSES_ROOT\Interface\{C6E2A22C-B3A8-43A4-B5EC-A5BB671AB3F7}
HKEY_CLASSES_ROOT\Interface\{CB9385AB-8541-4B2F-A363-48F64C612993}
HKEY_CLASSES_ROOT\Interface\{CF1674CC-EC9A-4AEE-996E-65A8F7C0B0E4}
HKEY_CLASSES_ROOT\Interface\{D5D6E9B5-30D5-4457-AC8B-399205F50411}
HKEY_CLASSES_ROOT\Interface\{D6A7D177-0B2F-4283-B2E8-B6310A45E606}
HKEY_CLASSES_ROOT\Interface\{E0D6C30A-B9A3-4181-8099-3B0D5A2B98AF}
HKEY_CLASSES_ROOT\Interface\{F100A342-3AC5-47FF-B5B3-FCDB6FC9F016}
HKEY_CLASSES_ROOT\Interface\{F4364EEC-31F5-4B8B-A7E0-3B6394C9D23F}
HKEY_CLASSES_ROOT\Typelib\{982392F9-9C65-48B4-B667-3459C46630D1}
HKEY_CLASSES_ROOT\Typelib\{F61D1CE1-5199-4B57-B59E-C6819EA92F3B}
HKEY_CURRENT_USER\Control Panel\Desktop\WallpaperStyle=0
HKEY_CURRENT_USER\Control Panel\Desktop\Wallpaper=%System%\wppp.html
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispAppearancePage=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispBackgroundPage=1
HKEY_LOCAL_MACHINE\SOFTWARE\ShudderLTD\PSGuard
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Update
Delete files:
intell32.exe, psguard.exe, psguardinstall.exe, core.dll, localization.dll, oleext.dll, oleext32.dll, wndsystem.dll, uninstiu.exe, wppp.html
Delete directories:
C:\Program Files\PSGuard
C:\Documents and Settings\[Current User]\Application Data\Shudder Global Limited

Other programs to remove PSGuard:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 27/12/05
Information updated: 19/12/07

Additional resources related to PSGuard:

Attention: If you know or you have a website or page about PSGuard removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about PSGuard parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Related news:
Similar parasites:
Related articles:
Related discussions: