Sunday, November 22, 2009

Remove Additional Guard (AdditionalGuard) Removal Tool

Additional Guard (AdditionalGuard) is a new threat propagated through the Internet and removable memory. There are two essentiallyt different ways for Additional Guard propagation: manual propagation implies that a user downloads and installs Additional Guard manually while secret propagation implies secret unauthorized by user downloading and installation of the rogue with virus or trojan. The latter should not be misunderstood: Additional Guard is not a self-replicated program and there is no info that Additional Guard is downloaded as a trojan so that it is neither a virus nor trojan; remove Additional Guard as a fake antispyware that pretends to scan host system but cannot find a simplest security issue as it has no database of threats descriptions. Its scan and alerts are boring and, moreover, induce slow computer problem. Get rid of Additional Guard and related trojans and viruses, where applicable.
Click here to initiate free system scan and perform Additional Guard removal, as well as to remove other infection found (using Spyware Doctor).

Additional Guard screenshot:


Additional Guard removal tool:

Additional Guard manual removal guide:
Delete Additional Guard files:

AG345d.exe
278.mof
mozcrt19.dll
sqlite3.dll
AG.ico
AGSys
AGSys\vd952342.bd
ag.cfg
Additional Guard.lnk
cookies.sqlite
cb.exe
CLSV.tmp
ddv.dll
dudl.drv
energy.dll
energy.sys
exec.exe
fan.drv
FS.dll
PE.drv
ppal.exe
SICKBOY.tmp
tjd.sys
Additional Guard.lnk
search.xml
Delete Additional Guard registry entries:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_7a9be.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://search-gala.com/?&uid=220&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1?
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://search-gala.com/?&uid=220&q={searchTerms}”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Additional Guard”

No comments: