Remove VirtualGuardPlus. Description and removal instructions

 
Title: VirtualGuardPlus
Also known as: VirtualGuard Plus, Virtual Guard Plus
Type: Malware
Severity scale:VirtualGuardPlus severity is 76  (76 / 100)
 
VirtualGuard Plus is malicious application trying to get your money. Fortunately, there’s no sign of it infecting computers on its own, but it uses misleading online advertisements to trick people into downloading it voluntarily. VirtualGuardPlus opens up a pop-up when user visits one of many malicious websites. The pop-up offers scanning a computer online and checking if the machine is clean from infections. Although there are “Yes” and “No” buttons on the advertisement, the options are misleading; whatever is chosen by user, he is redirected to another malicious website. VirtualGuardPlus states that a computer is badly infected and offers downloading security program. That’s the point where everyone should stop and close the website; if downloaded, Virtual Guard Plus is very difficult to remove.

It is dangerous scam because VirtualGuardPlus isn’t capable of locating or deleting threats. Do not download this program and do not purchase the full version.


Related files: VirusGuardPlus, bm.exe, ugac.exe, activate.exe, al.dat, dhlp.dll, FWSettings.bin, history.db, main.log, pgs.exe, ptask.exe, reload.exe, ResErrors.log, scnkrnl.dll, settings.ini, sqlite3.dll, unins000.dat, unins000.exe, pgs.xml, Activate.dat, BkSites.dat, bnlink.dat, cd.dat, incmp.dat, index.dat, pv.dat, vbpv.dat, enemies.dat, borlndmm.dll, SCANADWR.DLL, SCANBCDR.DLL, SCANDLDR.DLL, SCANDOS1.DLL, SCANEMUL.DLL, SCANFUNC.DLL, SCANKRNL.DLL, SCANMCR1.DLL, SCANOTHR.DLL, SCANSCR.DLL, SCANTOOL.DLL, SCANTROJ.DLL, SCANWIN1.DLL, UNACPU.DLL, UNADBX.DLL, unamscan.dll, UNMIME.DLL, UNPACK.DLL, UNPACKS.DLL, UNPACKS2.DLL, UNPEPACK.DLL, UA27601.DLL, UA27602.DLL, UA27603.DLL, UA27604.DLL, UADAILY.DLL, cross.gif, ga6p.gif, kb.url, main.ico, mini.ico, Online.url, support.ico, support.url, uninstall.ico, lapv.dat, license.rtf, pblock.dll, sbiebho.dll, ASupdater.dat, gup.exe, PGupdater.dat, UBupdater.dat, up.dat, updater.dat, atl71.dll, capicom.dll, mfc71.dll, msvcp71.dll, msxml3a.dll, dhlp.sys, threats.log

VirtualGuardPlus properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

VirtualGuardPlus snapshot:
VirtualGuardPlus removal

Automatic VirtualGuardPlus removal:

remover for VirtualGuardPlus

VirtualGuardPlus manual removal:

Kill processes:
bm.exe ugac.exe Activate.exe pgs.exe ptask.exe reload.exe unins000.exe gup.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5C3F6257-3E00-45C2-88D5-CB0F3A17BF0E}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F87F145-DC2D-4766-AF03-3A3B96FFAD98}
HKEY_CURRENT_USER\Software\Opera Software
HKEY_CURRENT_USER\Software\VirusGuardPlus
HKEY_CLASSES_ROOT\AppID\{EA7522F6-87CF-411e-8A55-19EE4344B676}
HKEY_CLASSES_ROOT\AppID\pblock.DLL
HKEY_CLASSES_ROOT\CLSID\{079AA557-4A18-424A-8EEE-E39F0A8D41B9}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{3124C396-FB13-4836-A6AD-1317F1713688}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{3D813DFE-6C91-4A4E-8F41-04346A841D9C}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{3E784A01-F3AE-4DC0-9354-9526B9370EBA}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{4DD441AD-526D-4A77-9F1B-9841ED802FB0}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{5C3F6257-3E00-45c2-88D5-CB0F3A17BF0E}
HKEY_CLASSES_ROOT\CLSID\{6F87F145-DC2D-4766-AF03-3A3B96FFAD98}
HKEY_CLASSES_ROOT\Interface\{2933BF96-7B36-11D2-B20E-00C04F983E60}
HKEY_CLASSES_ROOT\Interface\{2B8DE2FE-8D2D-11d1-B2FC-00C04FD915A9}
HKEY_CLASSES_ROOT\Interface\{3EFAA428-272F-11D2-836F-0000F87A7782}
HKEY_CLASSES_ROOT\Interface\{3EFAA429-272F-11D2-836F-0000F87A7782}
HKEY_CLASSES_ROOT\Interface\{C90352F7-643C-4FBC-BB23-E996EB2D51FD}
HKEY_CLASSES_ROOT\PopupBlocker.IEGPB
HKEY_CLASSES_ROOT\PopupBlocker.IEGPB.1
HKEY_CLASSES_ROOT\SBIEBHO.IEFW
HKEY_CLASSES_ROOT\SBIEBHO.IEFW.2
HKEY_CLASSES_ROOT\TypeLib\{D761645B-6B20-4698-AEE8-729981152A82}
HKEY_CLASSES_ROOT\TypeLib\{EA7522F6-87CF-411E-8A55-19EE4344B676}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C3F6257-3E00-45C2-88D5-CB0F3A17BF0E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6F87F145-DC2D-4766-AF03-3A3B96FFAD98}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\UAVUN_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Products
HKEY_LOCAL_MACHINE\SOFTWARE\ugac
HKEY_LOCAL_MACHINE\SOFTWARE\VirusGuardPlus
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\dhlp
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dhlp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "UGA6P11 2.2.366.12"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "BMN"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ugac"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "VirusGuardPlus"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce "overinstall"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\atl71.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\capicom.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\mfc71.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\msvcp71.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\msxml3.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\msxml3a.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\msxml3r.dll"
Unregister DLLs:
dhlp.dll scnkrnl.dll BORLNDMM.DLL SCANADWR.DLL SCANBCDR.DLL SCANDLDR.DLL SCANDOS1.DLL SCANEMUL.DLL SCANFUNC.DLL SCANKRNL.DLL SCANMCR1.DLL SCANOTHR.DLL SCANSCR.DLL SCANTOOL.DLL SCANTROJ.DLL SCANWIN1.DLL UNACPU.DLL UNADBX.DLL unamscan.dll UNMIME.DLL UNPACK.DLL UNPACKS.DLL UNPACKS2.DLL UNPEPACK.DLL UA27601.DLL UA27602.DLL UA27603.DLL UA27604.DLL UADAILY.DLL pblock.dll sbiebho.dll atl71.dll capicom.dll mfc71.dll msvcp71.dll msxml3a.dll

Delete files:
c:\\Program Files\\Common Files\\VirusGuardPlus c:\\Program Files\\Common Files\\VirusGuardPlus\\bm.exe c:\\Program Files\\Common Files\\VirusGuardPlus\\ugac.exe c:\\Program Files\\VirusGuardPlus\\Activate.exe c:\\Program Files\\VirusGuardPlus\\al.dat c:\\Program Files\\VirusGuardPlus\\dhlp.dll c:\\Program Files\\VirusGuardPlus\\FWSettings.bin c:\\Program Files\\VirusGuardPlus\\history.db c:\\Program Files\\VirusGuardPlus\\main.log c:\\Program Files\\VirusGuardPlus\\pgs.exe c:\\Program Files\\VirusGuardPlus\\ptask.exe c:\\Program Files\\VirusGuardPlus\\reload.exe c:\\Program Files\\VirusGuardPlus\\ResErrors.log c:\\Program Files\\VirusGuardPlus\\scnkrnl.dll c:\\Program Files\\VirusGuardPlus\\settings.ini c:\\Program Files\\VirusGuardPlus\\sqlite3.dll c:\\Program Files\\VirusGuardPlus\\unins000.dat c:\\Program Files\\VirusGuardPlus\\unins000.exe c:\\Program Files\\VirusGuardPlus\\Config\\pgs.xml c:\\Program Files\\VirusGuardPlus\\Dat\\Activate.dat c:\\Program Files\\VirusGuardPlus\\Dat\\BkSites.dat c:\\Program Files\\VirusGuardPlus\\Dat\\bnlink.dat c:\\Program Files\\VirusGuardPlus\\Dat\\cd.dat c:\\Program Files\\VirusGuardPlus\\Dat\\incmp.dat c:\\Program Files\\VirusGuardPlus\\Dat\\index.dat c:\\Program Files\\VirusGuardPlus\\Dat\\pv.dat c:\\Program Files\\VirusGuardPlus\\Engines\\AWBase\\vbpv.dat c:\\Program Files\\VirusGuardPlus\\Engines\\AWBase\\database\\enemies.dat c:\\Program Files\\VirusGuardPlus\\Engines\\PGBase\\vbpv.dat c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\BORLNDMM.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANADWR.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANBCDR.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANDLDR.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANDOS1.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANEMUL.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANFUNC.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANKRNL.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANMCR1.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANOTHR.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANSCR.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANTOOL.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANTROJ.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\SCANWIN1.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\UNACPU.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\UNADBX.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\unamscan.dll c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\UNMIME.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\UNPACK.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\UNPACKS.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\UNPACKS2.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\UNPEPACK.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\vbpv.dat c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\UpDate\\UA27601.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\UpDate\\UA27602.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\UpDate\\UA27603.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\UpDate\\UA27604.DLL c:\\Program Files\\VirusGuardPlus\\Engines\\plugins\\UpDate\\UADAILY.DLL c:\\Program Files\\VirusGuardPlus\\Graphics\\cross.gif c:\\Program Files\\VirusGuardPlus\\Graphics\\ga6p.gif c:\\Program Files\\VirusGuardPlus\\Graphics\\kb.url c:\\Program Files\\VirusGuardPlus\\Graphics\\main.ico c:\\Program Files\\VirusGuardPlus\\Graphics\\mini.ico c:\\Program Files\\VirusGuardPlus\\Graphics\\Online.url c:\\Program Files\\VirusGuardPlus\\Graphics\\support.ico c:\\Program Files\\VirusGuardPlus\\Graphics\\Support.url c:\\Program Files\\VirusGuardPlus\\Graphics\\uninstall.ico c:\\Program Files\\VirusGuardPlus\\LA\\lapv.dat c:\\Program Files\\VirusGuardPlus\\LA\\License.rtf c:\\Program Files\\VirusGuardPlus\\Tools\\pblock.dll c:\\Program Files\\VirusGuardPlus\\Tools\\sbiebho.dll c:\\Program Files\\VirusGuardPlus\\Up\\ASupdater.dat c:\\Program Files\\VirusGuardPlus\\Up\\gup.exe c:\\Program Files\\VirusGuardPlus\\Up\\PGupdater.dat c:\\Program Files\\VirusGuardPlus\\Up\\UBupdater.dat c:\\Program Files\\VirusGuardPlus\\Up\\up.dat c:\\Program Files\\VirusGuardPlus\\Up\\updater.dat c:\\WINDOWS\\system32\\atl71.dll c:\\WINDOWS\\system32\\capicom.dll c:\\WINDOWS\\system32\\mfc71.dll c:\\WINDOWS\\system32\\msvcp71.dll c:\\WINDOWS\\system32\\msxml3a.dll c:\\WINDOWS\\system32\\drivers\\dhlp.sys %UserProfile%\\Application Data\\VirusGuardPlus\\Logs\\threats.log
Delete directories:
c:\VirusGuardPlus
c:\Program Files\VirusGuardPlus
c:\Documents and Settings\All Users\Application Data\SalesMon
c:\Documents and Settings\All Users\Start Menu\Programs\VirusGuardPlus
%UserProfile%\Application Data\VirusGuardPlus

Other programs to remove VirtualGuardPlus:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 26/09/08
Information updated: 26/09/08

Additional resources related to VirtualGuardPlus:

Attention: If you know or you have a website or page about VirtualGuardPlus removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about VirtualGuardPlus parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: