Remove Dr. Guard (Dr. Guard Removal Instructions)

March 5th, 2010 | by Alex |

Dr. Guard Descriptions:

drguard1

Dr. Guard is a malicious anti-spyware application which has just recently entered the web. The fake software is very similar to other roguewares which are promoted through online scanners. Dr. Guard should never be trusted or installed on any computer.

drguard3

Once you get this virus, it starts its fake activities. First, it creates files on the registry. Later it begins scanning the entire system. Of course, Dr. Guard is designed in such a way that it would detect infections. Be sure you don’t get trapped because these so-called infections are only files created by Trojans in advance.

drguard5

In case you notice any of the symptoms mentioned below, be sure that your computer is infected by Dr. Guard and your machine needs to be fixed as soon as possible:

  • Although reminding the legible application, fake scans are displayed on your screen.
  • Different security warnings keep popping out of nowhere.
  • Your computer becomes really slow.
  • Your browser has a different home page, which is usually the site of Dr. Guard.
  • Simulated scan results are displayed on your PC.

Do not ever install Dr. Guard on your PC. In case you already have this infection, remove it following the instructions provided below.

ams Download SpyHunter* Spyware Detection Utility

Manual Dr. Guard Removal Instructions:

Stop These Dr. Guard Processes:
(Learn how to do this)
uninstall.exe

Find and Delete These Dr. Guard Files:
(Learn how to do this)
c:\Program Files\Dr. Guard
c:\Program Files\Dr. Guard\about.ico
c:\Program Files\Dr. Guard\activate.ico
c:\Program Files\Dr. Guard\buy.ico
c:\Program Files\Dr. Guard\drg.db
c:\Program Files\Dr. Guard\drgext.dll
c:\Program Files\Dr. Guard\drghook.dll
c:\Program Files\Dr. Guard\drguard.exe
c:\Program Files\Dr. Guard\help.ico
c:\Program Files\Dr. Guard\scan.ico
c:\Program Files\Dr. Guard\settings.ico
c:\Program Files\Dr. Guard\splash.mp3
c:\Program Files\Dr. Guard\uninstall.exe
c:\Program Files\Dr. Guard\update.ico

c:\Documents and Settings\Desktop\Dr. Guard Support.lnk
c:\Documents and Settings\Desktop\Dr. Guard.lnk
c:\Documents and Settings\Start Menu\Programs\Dr. Guard
c:\Documents and Settings\Start Menu\Programs\Dr. Guard\About.lnk
c:\Documents and Settings\Start Menu\Programs\Dr. Guard\Activate.lnk
c:\Documents and Settings\Start Menu\Programs\Dr. Guard\Buy.lnk
c:\Documents and Settings\Start Menu\Programs\Dr. Guard\Dr. Guard Support.lnk
c:\Documents and Settings\Start Menu\Programs\Dr. Guard\Dr. Guard.lnk
c:\Documents and Settings
\Start Menu\Programs\Dr. Guard\Scan.lnk
c:\Documents and Settings\Start Menu\Programs\Dr. Guard\Settings.lnk
c:\Documents and Settings\Start Menu\Programs\Dr. Guard\Update.lnk
c:\Documents and Settings\Application Data\Microsoft\Internet Explorer\Quick Launch\Dr. Guard.lnk

%Temp%\asr64_ldm.exe

Remove These Dr. Guard Registry Values:
(Learn how to do this)
HKEY_LOCAL_MACHINE\SOFTWARE\Dr. Guard
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved “{5E2121EE-0300-11D4-8D3B-444553540000}”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Dr. Guard
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Dr. Guard”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = “1″
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt

HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}

ams Download SpyHunter* Spyware Detection Utility

bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark


Add this page to Favorite (For Internet Explorer)


Disclaimer

  1. 6 Responses to “Remove Dr. Guard (Dr. Guard Removal Instructions)”

  2. By john on Mar 3, 2010 | Reply

    im terrible at computers and im trying to figure out if this is still on my computer

  3. By sama on Mar 4, 2010 | Reply

    hi
    thank u for help us

    but i have broplem in 3rd step
    i can not find Dr. Guard Registry Values to remove it .

    and dr.guard still warning me every minute and restart my compeuter every few minutes.

    what can i do ?

    help me please .

  4. By Alex on Mar 9, 2010 | Reply

    Dear sama,

    You say that you have problem with finding the registry values. Do you manage to open Registry Editor (regedit)?

  5. By Rae on Mar 12, 2010 | Reply

    I have the virus too… it’s brutal! I can’t access Regedit, it’s says regediting has been disabled by your administrator. Funny thing is My laptop has NEVER been connected to a network like that.
    It keeps popping up errors for Bad Image files.
    Help please… I can’t get rid of it.

  6. By Ricky Payne on Mar 16, 2010 | Reply

    Hello everybody. I have just been struck with this virus. One thing that helped me a lot was to run a programme called advanced system care free. The programme found and stopped a crucial process that was stopping me from accessing the task manager. After I had access to the task manager I stopped any process that looked suspicious or that i didnt recognise. (You can also start in safe mode for the same effect)

    Anyway, the first thing you should do once you have regained control of the task manager and mas config, is to stop the DR guard startup processes (This will make it a lot easier) that will stop Dr guard from regaining control of the task manager in the future when you restart..

    You should then run your virus scanner (Which you should be able to do now, without Dr guard interuppting with tricks such as to initiate a shut down.)

    After you have run a full system scan and removed any traces of the virus, you can then perform the actions in this tutorial..

    I have done all this and I think I now have it beat.. The only problem I have now is that I cant delete drgext.dll and I also cant do a system restore.

    But at least I can now save all my precious files and data before I do a complete system restore. Which I really advise doing (This virus seems to change a lot of system settings which is always a worry)
    Then

  7. By Alex on Mar 25, 2010 | Reply

    Dear Sama,

    Did you try to walk down to the tree-like menu on the left of the Registry editor in order to find these values? For example if you click “HKEY_LOCAL_MACHINE” node, then on “SOFTWARE” can you find “Dr. Guard” node under “SOFTWARE”?

Post a Comment