Remove Windows Additional Guard (Removal Instructions)

September 7th, 2009 | by Alex |

Windows Additional Guard Descriptions:

Windows Additional Guard is one more rogue anti-spyware program, using Windows design features to look legitimate. However, this is only an old trick. Do not be fooled.

After the installation on your computer, Windows Additional Guard pretends to be scanning the machine and starts displaying different pop-ups with alerts about the threats found. After that, the application tries to persuade the computer user that he or she can get rid of this malware by purchasing the full version of Windows Additional Guard. Unfortunately, you aren’t going to get any profit from this program. On the contrary, the creators of the application will only take money and you will be left without clothes on freezing ice.

Do not fall into this trap. Do not buy the program. Do not ever install it. If it is already on your pc, remove it following these steps.

Manual Windows Additional Guard Removal Instructions:

Stop Windows Additional Guard Processes:
(Learn how to do this)
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\exec.exe
%UserProfile%\Recent\cb.exe
c:\Documents and Settings\All Users\Application Data\345d567\WI345d.exe

Find and Delete These Windows Additional Guard Files:
(Learn how to do this)
c:\Documents and Settings\All Users\Application Data\345d567\WINAGSys
c:\Documents and Settings\All Users\Application Data\345d567\WINAGSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\WINAGSys
c:\Documents and Settings\All Users\Application Data\WINAGSys\winag.cfg
c:\Documents and Settings\All Users\Application Data\345d567\578.mof
c:\Documents and Settings\All Users\Application Data\345d567\WINAG.ico
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Additional Guard.lnk
%UserProfile%\Application Data\Windows Additional Guard
%UserProfile%\Application Data\Windows Additional Guard\cookies.sqlite
%UserProfile%\Desktop\Windows Additional Guard.lnk
%UserProfile%\Recent\ANTIGEN.tmp
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\dudl.drv
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\fan.drv
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\SICKBOY.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\Windows Additional Guard.lnk
%UserProfile%\Start Menu\Programs\Windows Additional Guard.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml

Remove Windows Additional Guard Values:
(Learn how to do this)
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” => “http://search-gala.com/?&uid=7&q={searchTerms}”
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “967907703″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Windows Additional Guard”