Windows Additional Guard manual removal:
Kill processes:
WI345d.exe cb.exe exec.exe ppal.exe
Delete registry values:HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "967907703"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Additional Guard"
Unregister DLLs:mozcrt19.dll sqlite3.dll ddv.dll energy.dll FS.dll
Delete files:578.mof mozcrt19.dll sqlite3.dll WI345d.exe WINAG.ico WINAGSys vd952342.bd winag.cfg Windows Additional Guard.lnk cookies.sqlite ANTIGEN.tmp cb.exe CLSV.tmp ddv.dll dudl.drv energy.dll energy.sys exec.exe fan.drv FS.dll PE.drv ppal.exe SICKBOY.tmp tjd.sys search.xml
Delete directories:c:\Documents and Settings\All Users\Application Data\345d567
c:\Documents and Settings\All Users\Application Data\WINAGSys
%UserProfile%\Application Data\Windows Additional Guard
Post Comment:
Attention: Use this form only if you have additional information about Windows Additional Guard parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.