Title: Windows Additional Guard

Type: Rogue Antispyware

Remove Windows Additional Guard. Removal instructions

Also known as: WindowsAdditionalGuard, WindowsAdditional Guard, Windows AdditionalGuard

Severity scale:

(72 / 100)

Windows Additional Guard is a misleading security application that displays fake security alerts and reports false system security threats to trick you into purchasing the program. The application is a clone of such rogue anti-spyware applications as Windows Protection Suite and Windows System Suite. Once installed, WindowsAdditional Guard will imitate system scan and report a variety of infections and errors. Then it will prompt you to pay for a full version of the program to remove non-existing infections. Ignore scan results and uninstall Windows Additional Guard from your computer as soon as possible.

Windows Additional Guard is promoted through the use of Trojans, browser hijackers, fake online anti-malware scanners and other malicious software. Usually, Trojans display fake security warnings and suggest you to active Windows AdditionalGuard in order to ensure full system protection. While active, the misleading application will constantly display system notifications about insecure internet connection or supposedly harmful files found on your PC. You will see fake security alerts with the following or similar text:

"Insecure Internet activity. Threat of virus attack
Due to Internet browsing your PC can easily get infected with viruses, worms, and trojanswithout your knoledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information. To get full advabced real-time protection your PC ant Internet activity, install an antivirus and antispyware software. We recommend you to protect your PC now and continue safe Internet browsing."

"Warning! Your computer is infected
Warning!Trojan Found!
Threat detected: Trojan
File name: eb.exe
Threat name: Trojan-Spy.HTML.Bayfraud.hn
Recommended: Please click "Remove all" to eliminate all possible threats and protect Your PC"

What is more, Windows Additional Guard will hijack your web browser and redirect you to various misleading websites. It it will also hijack all search results and display fake notifications about possible Internet attacks. You will notice that your computer is slower than usual too. As you can see WindowsAdditional Guard is nothing more but a scam. Do not purchase this program. Instead, please use the removal guide below to remove Windows Additional Guard from your computer manually for free. If you have undesignedly purchased this program, contact your Credit Card Company or bank immediately. You should also scan your computer with a reputable anti-spyware application to make sure there are no other malware installed on your computer.

Related files: search.xml, tjd.sys, SICKBOY.tmp, ppal.exe, PE.drv, FS.dll, fan.drv, exec.exe, energy.sys, energy.dll, dudl.drv, ddv.dll, CLSV.tmp, cb.exe, ANTIGEN.tmp, cookies.sqlite, Windows Additional Guard.lnk, winag.cfg, vd952342.bd, WINAGSys, WINAG.ico, WI345d.exe, sqlite3.dll, mozcrt19.dll, 578.mof

Windows Additional Guard properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

Windows Additional Guard snapshot:

Automatic Windows Additional Guard removal:

remover for Windows Additional Guard

SpyHunter is recommended remover to uninstall Windows Additional Guard. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of Windows Additional Guard and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Windows Additional Guard using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

Tested and Confirmed! STOPzilla removes Windows Additional Guard (2009-09-06 23:58:01)

Malwarebytes Anti Malware

download | review

Tested and Confirmed! Malwarebytes Anti Malware removes Windows Additional Guard (2009-09-06 23:58:01)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Windows Additional Guard (2009-09-07 02:54:50)

XoftSpySE Anti Spyware

download | review

Windows Additional Guard manual removal:

FORUM:
Discuss Windows Additional Guard in
spyware removal forum

Kill processes:
WI345d.exe cb.exe exec.exe ppal.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "967907703"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Additional Guard"

HELP:
how to remove registry entries

Unregister DLLs:
mozcrt19.dll sqlite3.dll ddv.dll energy.dll FS.dll

HELP:
how to unregister malicious DLLs

Delete files:
578.mof mozcrt19.dll sqlite3.dll WI345d.exe WINAG.ico WINAGSys vd952342.bd winag.cfg Windows Additional Guard.lnk cookies.sqlite ANTIGEN.tmp cb.exe CLSV.tmp ddv.dll dudl.drv energy.dll energy.sys exec.exe fan.drv FS.dll PE.drv ppal.exe SICKBOY.tmp tjd.sys search.xml

HELP:
how to remove harmful files

Delete directories:
c:\Documents and Settings\All Users\Application Data\345d567
c:\Documents and Settings\All Users\Application Data\WINAGSys
%UserProfile%\Application Data\Windows Additional Guard

Information added: 2009-09-06 23:58:01
Information updated: 2009-09-07 00:17:35

Additional resources related to Windows Additional Guard:

Attention: If you know or you have a website or page about Windows Additional Guard removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Windows Additional Guard parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.