Windows Guard Solutions is a rogue security program that displays fake security alerts and reports non-existent malware infections to trick you into purchasing the bogus software. Once installed, this fake anti-spyware program will imitate a system scan and report critical spyware and trojans infections as well as some system errors. Then it will prompt you to pay for a full version of the program to remove supposedly found infections from your computer. Because it's a scam you can safely ignore scan results and remove Windows Guard Solutions from your computer as soon as possible using legit antimalware software.
Windows Guard Solutions is promoted mostly via Trojans, browser hijackers, fake online virus scanners and hacked websites. Usually, Trojans display fake security warnings and suggest you to active Windows Guard Solutions in order to ensure full system protection. Hacked websites may download and install malicious software on your computer without your knowledge. That's why it's very important to use reliable antivirus software while browsing the web. While running, the rogue security application will constantly display bogus system notifications and fake security alerts about insecure internet connection or supposedly harmful files found on your PC. You will see fake security alerts with the following or similar text:
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
Windows Guard Solutions will hijack your web browser and redirect you to websites that may be infected or they can simply flood you with various ads. It may also hijack all search results and display fake notifications about possible Internet attacks and security threats. You will probably notice that your computer is slower than usual, that's because it uses a lot of CPU resource. As you can see Windows Guard Solutions is nothing more but a scam. Do not purchase this program. Instead, please use the removal guide below to remove Windows Guard Solutions from your computer using recommended malware removal tool. If you have purchased it, contact your Credit Card Company or bank immediately and dispute the charges.
The latest parasite names used by FakeVimes:
Windows Guard Solutions manual removal:
Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegedit" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegistryTools" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "ID" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "net" = "2012-2-17_2"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "UID" = "rudbxijemb"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avp32.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avpcc.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsashDisp.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsdivx.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmostat.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsplatin.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstapinstall.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionszapsetup3001.exe