Windows Internet Guard: what it is and how to remove it
Windows Internet Guard is a malicious program, which belongs to FakeVimes virus family. All viruses that belong to this gang share the same appearance and also act the same.
Facts checked October 7, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
Unsure whether taskmanger.exe is safe? A free scan checks the file and what starts it.
Do it yourself · free Remove Windows Internet Guard yourself 5 steps, about 15 minutes, no software needed.
Start the steps
Windows Internet Guard: summary
| Detection names | No Microsoft detection name is known |
|---|---|
| Distribution | Not recorded in the old report |
| Damage | Not recorded in the old report |
| Name | Windows Internet Guard |
| Type | Rogue antivirus |
| Symptoms | An unknown process in Task Manager |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 4 more facts
| Files and processes | taskmanger.exe |
|---|---|
| Evidence | One write-up by a security site; details still limited |
| First seen | 26 April 2021 |
| Facts checked | 7 October 2026 |
From our report of Apr 2021 · not reviewed since
What Windows Internet Guard is
Windows Internet Guard is a malicious program, which belongs to FakeVimes virus family.
All viruses that belong to this gang share the same appearance and also act the same. They all report about nonexistent viruses and then, after scaring people into believing that their PCs are infected, offer a pair removal solution. If Windows Internet Guard infiltrates the system, it starts displaying continuous pop-up notifications every time victim reboots his/hers computer.
Of course, it 'detects' the same viruses on every system it checks, so there is no point of believing its reported parasites. Once it finishes a 'scan', it offers to purchase its licensed version and promises that it will fix computer. However, no matter how trustworthy it looks, you should never believe it because it's just a tool used by hackers to swindle people's money.
Is Windows Internet Guard a real security program?
- File:
taskmanger.exe
From our report of Apr 2021 · not reviewed since
How can Windows Internet Guard infect my computer?
As soon as Windows Internet Guard is downloaded, it modifies the system by dropping its own registry entries and files.
These modifications give this virus ability to start its work every time the PC is rebooted, so it starts showing such misleading notifications:
Please, ignore these alerts because they are fake and misleading. They are displayed for the only thing - to make you purchase a useless licensed version, which has no ability to detect or remove viruses. If you have already been tricked into downloading this virus on your computer, you should waste no time and contact your credit card company to dispute charges.
From our report of Apr 2021 · not reviewed since
More from our earlier report on Windows Internet Guard
- Error System data security is at risk!
- To prevent potential PC errors, run a full system scan.
- Firewall has blocked a program from accessing the Internet c:\windows\system32\taskmanger.exe is suspected to have infected your PC.
- This type of virus intercepts entered data and transmits them to a remote server.
- Identity theft attempt detected Hidden connection IP: xx.xxx.xxx.xxx Target: Microsoft Corporation keys Your IP: XXXXXXXXXXX
How to remove Windows Internet Guard
Nothing it reports is real.
These steps remove it and undo a payment if you made one.
Step 1: Do not pay, and undo a payment if you made one
Nothing that Windows Internet Guard says it found needs fixing by it. Close its windows and do not enter card details.
If you bought it, contact your bank or card issuer about a dispute and cancel any renewal, keeping the receipt e-mail as evidence. Uninstalling it from Windows 11 or Windows 10 removes the program but leaves the subscription running.
Full procedure with screenshots: What to do after paying a scammer
Step 2: Uninstall programs you did not mean to install
Windows Internet Guard rarely comes alone: it is usually installed by, or together with, a free program. In Windows 11 open Settings > Apps > Installed apps, in Windows 10 Settings > Apps > Apps & features, and sort by install date.
Uninstall every entry from the day the trouble began that you did not install on purpose, for example a download manager, a converter or a browser you never chose.
Keep drivers and entries from Microsoft, Intel, AMD, NVIDIA or your PC's maker unless you are sure.
Full procedure with screenshots: Uninstall a program or app in Windows On uGetFix
Step 3: Remove it from startup
Press Ctrl + Shift + Esc to open Task Manager and select Startup apps (Windows 11) or the Startup tab (Windows 10). Disable entries you do not recognise, especially ones with no publisher or with a name that copies a Windows component.
Right-click an entry and choose Open file location to see where it runs from: programs in
%AppData%or%Temp%deserve a closer look. Some entries are not listed there but in the registry Run keys, which the procedure below shows how to check.Full procedure with screenshots: Stop apps from opening at startup On uGetFix
Step 4: Delete the folders left behind
Uninstalling often leaves the program's folders, and some threats reinstall themselves from them.
Press Windows + R, type
%LocalAppData%and press Enter, then do the same for%AppData%and %ProgramData%, and look for folders named after Windows Internet Guard, its publisher or created on the day the problem started.Delete those folders, and check
C:\Program FilesandC:\Program Files (x86)too.If Windows says a file is in use, end it in Task Manager or delete the folder after a restart in Safe Mode. The folders are the same in Windows 11 and Windows 10.
Full procedure with screenshots: Remove what malware leaves behind in Windows
Step 5: Scan the PC, then run the offline scan
A scan finds the parts of Windows Internet Guard that the manual steps cannot see. In Windows Security > Virus & threat protection > Scan options, start a Full scan and quarantine what it reports.
Follow it with Microsoft Defender Antivirus (offline scan) > Scan now, which restarts the PC and checks the disk while Windows and the malware are not running.
It takes about 15 minutes and works the same in Windows 11 and Windows 10. If either scan finds something, run the full scan again after removal until it comes back clean.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Do not let government spy on you
The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices.
Avoid any unwanted government tracking or spying by going totally anonymous on the internet.
You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using VPN.
Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.
Backup files for the later use, in case of the malware attack
Computer users can suffer from data losses due to cyber infections or their own faulty doings.
Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact - you can set this process to be performed automatically.
When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use for the data restoration process.
From our report of Apr 2021 · not reviewed since
How to remove Windows Internet Guard?
In order to remove Windows Internet Guard and get rid of its fake alerts, you should run a full system scan with or one of these programs that have also been showing great results when testing this virus: , .
If you can't launch any of them, use these instructions:
1. Reboot your computer to Safe Mode with Networking. Just reboot your PC and, as soon as it starts booting up, start pressing F8 repeatedly. 2.
Loggin as the same user as you were in normal Windows mode. 3. Now click on IE or other browser and select 'Run As' or 'Run As administrator', enter your Administrator account password (if needed).
4. Enter this link to your address bar: https://www.2-spyware.com/download/hunter.exe and download a program on your desktop. Launch it to kill the malicious processes and remove its files.
The latest parasite names used by FakeVimes:
Questions about Windows Internet Guard
What is taskmanger.exe and why is it running?
Every process is started by something:
- a program you installed
- a Windows service
- a scheduled task
- a startup entry
To learn why taskmanger.exe runs, find its file with Open file location in Task Manager, then look for an entry pointing to that file in Settings > Apps > Startup and in Task Scheduler.
Sort Installed apps by date to see what arrived when the process first appeared. Once you know the owner, you can decide whether to keep it, switch it off at startup or uninstall it completely.
Can I delete the taskmanger.exe file?
Only after you know what it belongs to. If taskmanger.exe is part of a program, uninstall that program through Settings instead, so its services and tasks go too. If it belongs to nothing and is unsigned, end the process, disable whatever starts it and then delete its folder.
Do not delete files from the Windows folder or files signed by Microsoft: those are part of the system, and removing them can stop Windows from starting. When in doubt, run a Microsoft Defender scan first and let it decide.
Someone called offering a refund for Windows Internet Guard. Is it genuine?
Almost certainly not. Refund calls are a well-known second stage of scareware and tech support scams. The caller says you are owed money, asks you to install a remote access program to "process" it, then opens your online banking, makes it look as if too much was refunded and asks you to send the difference back.
Hang up. Real refunds go back to the card or PayPal account you paid with, through your bank or the payment provider, and never need remote access or a gift card.
Did Windows Internet Guard steal my information?
Not by itself, as far as reports show. Programs that display an unfamiliar process called taskmanger.exe in Task Manager are built to scare people into paying or calling; they rarely take data on their own.
The risk comes from what you did in response: typing card details into the program, or letting a caller connect to your PC. If you did neither, uninstalling the program is enough. If you did either, treat that information as exposed:
- block the card
- change passwords from another device
- remove any remote-access tool that was installed
What could the caller do while connected to my PC?
Anything you could do. Callers working with fake alerts like Windows Internet Guard typically show you Windows logs as "proof", install their own remote tool for later, and steer you to online banking or a gift card purchase. Some add a password to Windows or lock the PC if you refuse to pay.
Remove every remote access program you did not install yourself, check Settings > Accounts > Other users for new accounts, and change important passwords from a clean device. If you cannot be sure what was changed, a reset of Windows is the safe choice.
Why does Windows Internet Guard look so official?
Because copying the design costs nothing and makes people trust it. The program behind an unfamiliar process called taskmanger.exe in Task Manager borrows Windows colours, icons and wording, sometimes even the name of a well-known security brand. None of that gives it access to real security information.
A real alert can be checked in seconds: open Windows Security from the Start menu and look at Protection history. If nothing is listed there, the official-looking window is fake, and the program that draws it is what needs to be removed.
Do I need to reinstall Windows to get rid of Windows Internet Guard?
Usually not. A thorough clean-up is enough when the offline scan finds nothing afterwards and you do not see an unfamiliar process called taskmanger.exe in Task Manager again. A reset is the safer choice if an attacker had remote control, if security tools were switched off, or if detections come back after every clean-up.
Windows 11 can reset itself without a USB stick under Settings > System > Recovery > Reset this PC. Copy documents and photos out first and scan the copies. A reset does not change passwords or undo stolen data, so the account steps still apply.
Is my card safe after buying Windows Internet Guard?
Treat it as exposed. The order page belongs to the seller of Windows Internet Guard, and you cannot know how the number is stored or shared. Ask your bank for a replacement card, which is usually free, and dispute the original charge as a misrepresented product.
Until the new card arrives, check your account daily for small or foreign transactions. If the bank offers alerts for every card payment, turn them on. Keep the receipt and screenshots, because they support the dispute.
Will Fortect remove Windows Internet Guard?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Windows Internet Guard, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- FTC: How to recognize, remove and avoid malware (read October 7, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 7, 2026)
- Microsoft Learn: How Microsoft names malware (read October 7, 2026)