Title: Win 7 Guard

Type: Rogue Antispyware

Also known as: Win7Guard

Remove Win 7 Guard
Removal instructions

Severity scale:

(96 / 100)

Win 7 Guard is a typical rogue anti-spyware which will “inform” you about tons of viruses detected while in reality it will be the one that needs to be uninstalled. Win 7 Guard is designed to create an image that computer is dramatically infected because additionally it starts offering the way for fixing everything. This way is so called “licensed” version which is promised to remove every cyber threat detected by its trial version. However, by purchasing Win 7 Guard, you will only support its creators. Keep in mind that you must remove Win 7 Guard just like all other viruses from its dangerous Fake anti-spywares’ family (XP Guard , for example)
Win 7 Guard is known to be spread through fake online scanners, fake flash updates and malicious video codecs that are aggressively required for watching videos online. Once it gets there, malware configures some system parameters to disable security programs found or make itself launched as soon as computer reboots.

The additional actions of Win 7 Guard should be clear for every person who has already had some rogue anti-spyware on his PC: malware will trigger numerous popup ads and security scanners with faked information given, like:

Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.

System Hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.

These alerts claiming about numerous viruses detected are useless because they tell invented facts. Of course, they should be never trusted and followed, so remember that only Win 7 Guard can help in this situation. If it is left running no your PC, you will start facing continuous redirections to malware sites and attacks from more viruses. To stop this scam and additionally remove it, try Win 7 Guard removal instructions written below:

To remove Win 7 Guard you may need another PC, as removing it from safe mode with networking will not work in most of the cases.

a) Burn these programs to CD or write them to USB disk. You can use your MP3 player, or smartphone if it has storage functions. This parasite does not spread through USB at the moment:

1. Spyware Doctor or an automatic removal tool below. Update Spyware Doctor and run a full system scan.

2.You might want to download Hitman Pro or Malwarebytes as alternate scanners. Though you are likely to be able to download them later on.

b) Boot normally. Wait for Win 7 Guard to launch, and run exeregfix.reg . This should allow launching legitimate programs

c) Delete or remove the files that are mentioned in our files box. You can use Spyware Doctor to identify the infected files and additional infections or automatic Win 7 Guard removal tool. Do not forget update it before scanning. Remove what it finds.

d) Scan with Spyware Doctor and secondary tools and reboot your PC. This should fully get rid of Win 7 Guard.

UPDATE!!! One of PC security bloggers, S!Ri, has announced about a serial code that may help you to disable those malwares that all change their names according to OS they find. Enter this serial code when doing Win 7 Guard registration: 145-17884799-7733. This and the order number 21197673 should also work for earlier versions of this type of parasite. After typing them, you should become able to use your anti-spyware, if it fails follow the guide written above. Be aware that these numbers are expected to change in the near future!

Related files: %UserProfile%AppDataLocalMSASCui.exe, %UserProfile%AppDataLocalpw.exe, %UserProfile%AppDataLocalopRSK, %UserProfile%Local SettingsApplication DataMSASCui.exe, %UserProfile%Local SettingsApplication Datapw.exe, %UserProfile%Local SettingsApplication DataopRSK

Win 7 Guard properties:
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic Win 7 Guard removal:

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove Win 7 Guard you agree to our privacy policy and agreement of use.

remover for Win 7 Guard

SpyHunter is recommended remover to uninstall Win 7 Guard. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of Win 7 Guard and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Win 7 Guard using SpyHunter please report this to us.

Malwarebytes Anti Malware

Download | review

Tested and Confirmed! Malwarebytes Anti Malware removes Win 7 Guard (2010-11-15 07:08:54)

STOPzilla

Download | review

Tested and Confirmed! STOPzilla removes Win 7 Guard (2010-11-15 07:08:54)

Spyware Doctor

Download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Win 7 Guard (2010-11-16 08:41:29)

XoftSpySE Anti Spyware

Download | review

Win 7 Guard manual removal:

FORUM:
Discuss Win 7 Guard in
spyware removal forum

Kill processes:
pw.exe
MSASCui.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USERSoftwareClassespezfile
HKEY_CLASSES_ROOTpezfile
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CURRENT_USERSoftwareClassespezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CLASSES_ROOTpezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe"
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesInternet Exploreriexplore.exe"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1"

HELP:
how to remove registry entries

Delete files:
%UserProfile%Local SettingsApplication DataopRSK
%UserProfile%Local SettingsApplication Datapw.exe
%UserProfile%Local SettingsApplication DataMSASCui.exe
%UserProfile%AppDataLocalopRSK
%UserProfile%AppDataLocalpw.exe
%UserProfile%AppDataLocalMSASCui.exe

HELP:
how to remove harmful files

Phone Support to remove Win 7 Guard

QR code for Win 7 Guard removal instructions:

QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like Win 7 Guard are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Win 7 Guard right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.

SYMPTOMS OF rogue antispyware INFECTION

Rogue AntiSpyware virus enters your PC without your consent or using some sort of social engineering trick. Fake scanner pages, malicious mail attachments or system vulnerabilities are often used.

Virus has a single goal: to gain money. Like other rogue anti-spyware applications, it will try to convince you that your system is infected with multiple parasites: trojans, adware, or other rogues. Typically, rogues do not provide enough detail about infections detected or show fake results. Rogue anti-spyware like Win 7 Guard will not clean any actual infections for free.

Most of the parasites of this type do not have parasite detection engine thus every warning they show is a random one. If you see persistent popups or alerts, you can safely discard them.

You should never pay for Rogue Anti-spyware application like Win 7 Guard as it funds development of other computer parasites.

Information added: 2010-11-15 07:08:54
Information updated: 2010-11-16 06:04:14

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Win 7 Guard parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.

Remove Win 7 Guard Removal instructions

Automatic Win 7 Guard removal:

Win 7 Guard manual removal:

QR code for Win 7 Guard removal instructions:

SYMPTOMS OF rogue antispyware INFECTION

Additional resources: