Severity scale:  

Windows Premium Guard. How to remove? (Uninstall guide)

by ,
Also known as WindowsPremiumGuard | Type: Rogue Antispyware
SpyHunter is a tool to detect malware. You need to purchase full version to remove infections.
More information about SpyHunter and steps to uninstall.

Windows Premium Guard is a rogue anti-spyware program should be uninstalled from the system as soon as possible. This kind of software is usually classified as rogue anti-spyware because it's not like a real virus but more like a useless program tries to swindle the money from its victims by offering fake malware removal services. Windows Premium Guard is attached to the Win32/FakePAV  and Win32/FaleVimes families of scareware. All these rogue anti-spywares have managed to make much harm for PC users, so make sure you don't fall victom to it. As soon as you notice its fake warnings announcing about malware detected, remove Windows Premium Guard from your computer. The best way to remove this rogue antispyware program frpm the system is to use legitimate anti-malware software which will not only remove the rogue program from your computer but will also check the system for other malware.

Windows Premium Guard is designed to scare as many computer users as possible into believing that their computers are infected. It starts displaying fake security alerts that pretend to be checking the system for viruses, spyware and other malicious software. However, all those continuous system scanners and alerts actually do nothing but display identical alerts like earlier versions of Windows Premium Guard and report only invented viruses or legitimate files supposedly detected on your computer. Windows Premium Guard simply may display numerous fake security alerts identical or similar to these ones:

Firewall has blocked a program from accessing the Internet.
Windows Media Player Resources
C:\Windows\system32\dllcache\wmploc.dll is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.

Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

As you can see, Windows Premium Guard simply pretends to find some malware on your computer but it doesn't actually exists. They will start appearing on your PC just after some minor modifications will be made on your infected computer. When talking about the ways how Windows Premium Guard is promoted, you should know that this malware enters the system with the help of trojans, infected websites and fake online virus scanners. You can be tricked into installing its trial version for free or simply downloading fake Flash or Java updates. 

As you can see, this rogue program doesn't do anything useful and simply promotes its full version. Please, avoid this scam at all costs. As soon as you notice its fake security alerts, remove the rogue program from your computer. You can try to remove this malware manually but we strongly recommend you to use an automatic malware removal given below. This will guarantee you that you won't miss orther infected files that may comed bundled with the rogue anti-spyware program. 

The latest parasite names used by FakeVimes:
Windows Internet Guard, Windows Web Watchdog, Windows AntiBreach Patrol, Windows Antivirus Patrol, Windows Pro Defence Kit

Windows Premium Guard video guide

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
remover for Windows Premium Guard
Compatible with OS X
Webroot SecureAnywhere AntiVirus is recommended remover to uninstall Windows Premium Guard. You should confirm using free trial that it detects current version of parasite.
Not using OS X? Download a remover for Windows.
Do it now!
remover for Windows Premium Guard Happiness
Compatible with Microsoft Microsoft Windows logo
SpyHunter is recommended to uninstall Windows Premium Guard. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of SpyHunter malware removal tool. More information about this program can be found in SpyHunter review. If you decided to select another anti-spyware, uninstall SpyHunter from your computer.
more than 40.000.000 downloads!
What to do if failed? If you failed to remove infection using Webroot SecureAnywhere AntiVirus SpyHunter, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.
Alternate Software
We are testing STOPzilla's efficiency (2012-04-27 07:44)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2012-04-27 07:44)
XoftSpySE Anti Spyware
We are testing XoftSpySE Anti Spyware's efficiency (2012-04-27 07:44)
Defender Pro Ultimate
Windows Premium Guard screenshot
Windows Premium Guard snapshot

Windows Premium Guard manual removal

Kill processes:
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "ID" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-2-17_2"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "rudbxijemb"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
Delete files:

Information updated:

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name


(All fields are required)
Like us on Facebook