Removal Instructions for WindowsAdditionalGuard

There is nothing original about WindowsAdditionalGuard. It is a “traditional” rogue security application that uses devious and unethical means of promotion. It will invade a computer without the user’s permission or knowledge through a Trojan horse program. Then, after it has been secretly installed, it will begin a series of false security warnings and fake systems scans. The results from the scans will be false and will be used to scare the user into paying for the full version of WindowsAdditionalGuard.

This program is completely useless and is nothing short of a scam. If left to fester on a computer it will hinder the computer’s performance and Internet speed. It will also hijack the user’s browser and take them to unsafe websites. This is why you should remove it immediately if it has infected your computer. In order to remove it manually, you should kill the following processes:

Type : Rogue Security Application

Relative file contents :

578.mof, mozcrt19.dll, sqlite3.dll, WI345d.exe, WINAG.ico, WINAGSys vd952342.bd, winag.cfg, Windows Additional Guard.lnk, cookies.sqlite, ANTIGEN.tmp, cb.exe, CLSV.tmp, ddv.dll, dudl.drv, energy.dll, energy.sys, exec.exe, fan.drv, FS.dll, PE.drv, ppal.exe, SICKBOY.tmp, tjd.sys, search.xml

WI345d.exe
cb.exe
exec.exe
ppal.exe

Then, delete these registry values:

HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” => “http://search-gala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform”967907703″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Windows Additional Guard”

Unregister these DLLs:

mozcrt19.dll
sqlite3.dll
ddv.dll
energy.dll
FS.dll

Delete these files:

578.mof
mozcrt19.dll
sqlite3.dll
WI345d.exe
WINAG.ico
WINAGSys vd952342.bd
winag.cfg
Windows Additional Guard.lnk
cookies.sqlite
ANTIGEN.tmp
cb.exe
CLSV.tmp
ddv.dll
dudl.drv
energy.dll
energy.sys
exec.exe
fan.drv
FS.dll
PE.drv
ppal.exe
SICKBOY.tmp
tjd.sys
search.xml

Finally, delete these directories:

c:\Documents and Settings\All Users\Application Data\345d567
c:\Documents and Settings\All Users\Application Data\WINAGSys
%UserProfile%\Application Data\Windows Additional Guard

Though WindowsAdditionalGuard can be removed manually, it is far better to use a reliable antispyware application that you can trust. Since this rogue is usually installed by a Trojan horse, manually removing the rogue is pointless because the Trojan can easily reinstall it. However, if you use an antispyware program, all malicious software can be detected at once and removed at the same time.

ZookaWare PC Cleaner is a high quality antispyware application developed by a trustworthy company in good standing with the Better Business Bureau. In fact, this award winning program is the only antispyware guaranteed to remove 100% of all spyware and malware. This is made possible because ZookaWare PC Cleaner’s database is always being updated. So don’t settle for partial protection. Get complete protection from malware with ZookaWare PC Cleaner today.

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

2 Responses

  1. Gill Foreman says:

    I’m not sure where it came from, but there is a new program on my computer called WindowsAdditionalGuard and it is bugging the crap out of me! I keep getting these pop-ups that tell me I should scan my computer with that program. And sometimes it starts to automatically scan my computer! It is always telling me to buy it but I just don’t trust it. I tried many times to remove it, but it keeps coming back.
    I heard about SpyZooka and it is my last hope to get rid of this virus.

  2. Shannon Barber says:

    I have only been using SpyZooka for a couple of months, but so far I like it. Easy to install, easy to use, and seems to do a very good job.

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php