Removal Instructions for Windows Additional Guard

Of all the rogue security applications out there, Windows Additional Guard is one of the most dangerous. Though it has “Windows” in its name, it is not to be trusted. It is nothing but a scam that takes advantage of people by using a trusted name. However, though it is more dangerous because of its name, it behaves just like other rogues. It is promoted through Trojan horses, it displays fake security alerts, and performs fake system scans. The false scan results will show a number of fake infections and registry alerts in order to frighten the user into paying to register the program.

You should not trust this program. It will do nothing but harm your computer and hinder all performance. Instead, remove it from your computer the instant that its presence is discovered. If you wish to remove it manually, start by killing the following processes:Type : Rogue Security Application

Relative file contents :

578.mof, mozcrt19.dll, sqlite3.dll, WI345d.exe, WINAG.ico, WINAGSys vd952342.bd, winag.cfg, Windows Additional Guard.lnk, cookies.sqlite, ANTIGEN.tmp, cb.exe, CLSV.tmp, ddv.dll, dudl.drv, energy.dll, energy.sys, exec.exe, fan.drv, FS.dll, PE.drv, ppal.exe, SICKBOY.tmp, tjd.sys, search.xml

WI345d.exe
cb.exe
exec.exe
ppal.exe

Delete the following registry entries:

HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” => “http://search-gala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “967907703”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Windows Additional Guard”

Unregister these DLLs:

mozcrt19.dll
sqlite3.dll
ddv.dll
energy.dll
FS.dll

Delete these files:

578.mof
mozcrt19.dll
sqlite3.dll
WI345d.exe
WINAG.ico
WINAGSys vd952342.bd
winag.cfg
Windows Additional Guard.lnk
cookies.sqlite
ANTIGEN.tmp
cb.exe
CLSV.tmp
ddv.dll
dudl.drv
energy.dll
energy.sys
exec.exe
fan.drv
FS.dll
PE.drv
ppal.exe
SICKBOY.tmp
tjd.sys
search.xml

Finally, delete these directories:

c:\Documents and Settings\All Users\Application Data\345d567
c:\Documents and Settings\All Users\Application Data\WINAGSys
%UserProfile%\Application Data\Windows Additional Guard

Though these directions will help you remove Windows Additional Guard from your computer, they won’t remove the Trojan that downloaded it in the first place. Your computer will still be at risk, so the best thing to do is use a legitimate antispyware program that you can trust.

ZookaWare PC Cleaner is a quality antispyware application developed by ZookaWare, a company in good standing with the Better Business Bureau. ZookaWare PC Cleaner is also the only legitimate antispyware guaranteed to remove 100% of spyware from your computer. This is made possible because of their spyware hunting robot that searches over 100 million websites a day for new malware. So, don’t settle for some mediocre program. Get complete protection with ZookaWare PC Cleaner today.

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

One Response

  1. Bailey Martin says:

    So far so good. Seems my laptop is working fine with SpyZooka and RegZooka working together…

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php