Title: Windows Guardian Angel
Also known as: WindowsGuardianAngel

Remove Windows Guardian Angel
Removal instructions

 
Severity scale:Windows Guardian Angel severity is 80  (80 / 100)
 

Windows Guardian Angel is a fake program that imitates a legitimate anti-spyware tool in order to earn money from computer users. The application infiltrates computer without any notification and it doesn't need authorization of its user.

Windows Guardian Angel is installed with a help of Trojan viruses that spread on malicious websites promoting online scanners. The program invades the system using rough techniques. It quickly integrates there and blocks your reputable anti-spyware tools in order to make it difficult to be removed.

The application looks exactly like a legitimate anti-spyware removal software. It runs the scan on your machine and after it finishes. Windows Guardian Angel displays a list of infected files. In reality these scan results doesn't reflect a real condition of your computer.

However, Windows Guardian Angel insists removing them and this, however, is possible only if you register its copy. Of course, you are asked to pay for this license and that is how the creators of Windows Guardian Angel gain money from the users of infected computers.

The program also modifies some keys in Windows Registry and hijacks your Internet Browser. It displays a bunch of various alerts which warn about spyware infections detected on your system. These notifications also claim that you need to purchase Windows Guardian Angel in order to fix the protection problems on your computer:

Torrent Alert
Recomended: Please use secure encrypted protocol for torrent links.
Torrent link detected!
Receiving this notification means that you have violated the copyright laws. Using Torrent for downloading movies and licensed software shall be prosecuted and you may be sued for cybercrime and breach of law under the SOPA legislation.
Please register your copy of the AV to activate anonymous data transfer protocol through the torrent link.

Warning! Identity theft attempt Detected
Hidden connection IP: xxxxxxxxx
Target: Your passwords for sites

Warning
Firewall has blocked a program from accessing the Internet.
Windows Media Player Resources
C:\Windows\system32\dllcache\wmploc.dll
C:\Windows\system32\dllcache\wmploc.dll is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.

Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.

Ignore these messages just like the scan results and do not pay for activating this scam application. Instead you should get rid of Windows Guardian Angel itself with a reliable anti-spyware program, like . If you have already paid for this malicious program you can still try to contact your credit card company so that the charges would be canceled. Windows Guardian Angel is totally worthless software and you should not waste your money on it.

The latest parasite names used by FakeVimes:
Windows Protection Maintenance, Windows Safety Series, Windows Secure Workstation, Windows Anti-Malware Patch



Automatic Windows Guardian Angel removal:

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove Windows Guardian Angel you agree to our privacy policy and agreement of use.
SpyHunter is recommended remover to uninstall Windows Guardian Angel. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

If you failed to remove Windows Guardian Angel using SpyHunter, submit question to our support team and provide as much details as possible.
dot
Malwarebytes Anti Malware
download
manual required
We are testing Malwarebytes Anti Malware's efficiency at removing Windows Guardian Angel (2012-03-20 07:24:53)
dot
Defender Pro Ultimate Security Suite
download
manual required
We are testing Defender Pro Ultimate Security Suite's efficiency at removing Windows Guardian Angel (2012-03-20 07:24:53)
dot
STOPzilla
download
manual required
We are testing STOPzilla's efficiency at removing Windows Guardian Angel (2012-03-20 07:24:53)
dot
XoftSpySE Anti Spyware

what to do if you failed to remove the infection?
Phone Support to remove Windows Guardian Angel
Phone Support to remove Windows Guardian Angel
Windows Guardian Angel snapshot:
Windows Guardian Angel snapshot

Windows Guardian Angel manual removal:

Kill processes:
%appdata%\Inspector-[rnd].exe
%AppData%\Protector-[rnd].exe
Delete registry values:
HKEY_CURRENT_USER\\Software\Microsoft\\Windows\\CurrentVersion\\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\\Software\Microsoft\\Windows\\CurrentVersion\\Policies\\System "DisableRegedit" = 0
HKEY_CURRENT_USER\\Software\Microsoft\\Windows\\CurrentVersion\\Policies\\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\\Software\Microsoft\\Windows\\CurrentVersion\\Policies\\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\\Software\Microsoft\\Windows\\CurrentVersion\\Run "Inspector"
HKEY_CURRENT_USER\\Software\Microsoft\\Windows\\CurrentVersion\\Settings "net" = "2012-3-11_2?
HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Settings "UID" = "origkboryd"
HKEY_LOCAL_MACHINE\\SOFTWARE\Microsoft\\InternetExplorer\\Main\\FeatureControl\\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_LOCAL_MACHINE\\SOFTWARE\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\atcon.exe
HKEY_LOCAL_MACHINE\\SOFTWARE\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\bipcp.exe
HKEY_LOCAL_MACHINE\\SOFTWARE\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\ecengine.exe
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\infwin.exe
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\msconfig
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\PavFnSvr.exe
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\sahagent.exe
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\titaninxp.exe
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\wsbgate.exe
Unregister DLLs:
%AppData%\NPSWF32.dll

Delete files:
%AppData%\NPSWF32.dll
%AppData%\Protector-3 characters.exe
%AppData%\result.db
%CommonStartMenu%\Programs\Windows Managing System.lnk
%Desktop%\Windows Managing System.lnk

QR code for Windows Guardian Angel removal instructions:

Windows Guardian Angel qrcode
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like Windows Guardian Angel are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Windows Guardian Angel right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.
Information added: 2012-03-20 07:24:53
Information updated: 2012-08-01 09:49:32

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

0
0
andrea
sono riuscito ad eliminra il file di windows guardian angel ma deve aver compromesso i file di registro e non mi fa urtilizzare correttamente alcuni programmi inibendo la loro funzionalità cosa posso fare - grazie
0
0
Yiddish
Windows OS are simply superb

Post Comment:

Attention: Use this form only if you have additional information about Windows Guardian Angel parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name



«


* All field required
Like us on Facebook
Latest spyware news:
Subscribe to spyware news
Please enter your e-mail address:
If you do not want to receive our spyware
newsletter please unsubscribe here
48031 Subscribers
Ask us
I failed to remove Windows Guardian Angel using SpyHunter.

Email


Close

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
add text box
rss feed
help other