GuardPcs is a fake anti-spyware program. You should carefully read provided removal instructions and remove this malicious software from your computer as soon as possible. Guard Pcs malware is from the WiniSoft family and looks just like the IGuardPC scareware. Most of the time, GuardPcs enters a computer with the help of Trojans, but may come bundled with other malicious software too. Once installed, the rogue program creates several files in main Windows directories (usually C:\WINDOWS) and later detects those files as infections. This parasite simulates a system scan and reports false system security threats. What is more, it constantly displays fake security alerts/warnings and notifications.
[Figure 1. GuardPcs graphical user interface]
The main goal of GuardPcs is to trick you into thinking that your computer is infected with Trojans, worms, spyware and etc. This malware may use names and descriptions of real infections to make this scam look more reliable. However, the only real infection is Guard Pcs itself. Please note that GuardPcs is usually downloaded by Trojans, so you should scan your computer with a legitimate anti-spyware application like STOPzilla to remove the remains or additionally installed Trojans (or other malware). When the rogue program is running, you will see fake notifications from Windows Taskbar. Those fake notifications will state:
All the rogue program from the Winisoft family (50+) use the same text as written above. At this point, malware creators are lazy. But the distribute malware quite effectively using fake online anti-malware scanners or other misleading websites. They use Facebook, MySpace or even Youtube to promote their products. Be very careful and do not download or install anything from suspicious websites. Also, do not open links from from people you don’t know.
If your computer is infected with this rogue program, please use the manual removal guide below or an automatic removal tool to remove GuardPcs from the system as soon as possible. Most importantly, do not purchase it. I you have already purchased it please contact your credit card company and dispute the charges. Good luck and be safe!
GuardPcs manual removal:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[RANDOM CHARACTERS].exe"
C:Program FilesGuardPcs Software
C:Program FilesGuardPcs SoftwareGuardPcs
C:Documents and SettingsAll UsersStart MenuProgramsGuardPcs