Remove Win7 Guardian. Description and removal instructions

 
Title: Win7 Guardian
Also known as: Win7Guardian
Type:
Severity scale:Win7 Guardian severity is 1  (1 / 100)
 
Win7 Guardian is a rogue antispyware program, fake malware removal tool. Win7Guardian is usually distributed through the use of Trojans that come from bogus websites pretending to be online anti-malware scanners. Trojans can also come bundled with other malicious software. When the Trojan is installed, it will download and install Win7 Guardian onto your computer.

Once installed, Win7 Guardian will be configured to run automatically each time you logon into Windows. Once started, the fake security application will run a system scan and detect legitimate Windows files and non-existing files as infections. Once inside and active, the Trojan will flood the user with pop-ups and fake system notifications to dis-inform him on the existence of multiple errors in the system. This is done to create a reason for the user to buy Win7 Guardian "licensed version", which is completely and utterly non-functional. If you buy it - consider yourself scammed.

All those fake alerts and pop-ups and false scan results should be ignored. If you are infected with Win7 Guardian, please use these removal instructions below, which will help you to remove Win7 Guardian from your computer manually for free or with an automatic removal tool.


Related files: %UserProfile%\AppData\Local\av.exe, %UserProfile%\AppData\Local\WRblt8464P

Win7 Guardian properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic Win7 Guardian removal:

remover for Win7 Guardian

Win7 Guardian manual removal:

Kill processes:
av.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
Delete files:
%UserProfile%\\AppData\\Local\\av.exe %UserProfile%\\AppData\\Local\\WRblt8464P

Other programs to remove Win7 Guardian:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 29/01/10
Information updated: 29/01/10

Additional resources related to Win7 Guardian:

Attention: If you know or you have a website or page about Win7 Guardian removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Win7 Guardian parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: