How to Remove Additional Guard | Additional Guard Removal Guide



Additional Guard is a rogue antivirus application and like many of these it can either be installed with or without the users permission. Even without a person actually wanting it, but simply visiting the wrong web page users may find this program on their system. Once on their system this software will popup many ads and warnings. It will claim that your computer is infected with many viruses and has many problems that only it can fix and of course, it CAN’T fix them unless you pay. It’s really a scam that will cost you money and not solve any problems. Read on for how to remove additional guard.


You may wish to start with the control panel and attempt to uninstall additional guard via the control panels add/remove programs applet. This may work and if it does that is almost as easy as rogue antivirus removals get. You still would want to scan your system with a tool such as malwarebytes antimalware and run a virus scan with a trusted antivirus product.

Among the warnings you may see from this rogue are the following:

System alert!
Suspicious software which may be malicious has been
detected on your PC. Click here to remove this threat
immediately using Additional Guard.

System message
Your PC may still infected with dangerous viruses.
Additional Guard protection is needed to prevent data loss
and avoid theft of your personal data and credit card details.
Click here to activate protection.

Warning! Virus Detected
Threat detected: Trojan-PSW.Win32.Dripper

Additional Guard also creates the following files to later claim they have viruses:

%user%RecentANTIGEN.drv
%user%RecentANTIGEN.tmp
%user%Recentcid.dll
%user%RecentCLSV.tmp
%user%Recentddv.dll
%user%Recenteb.drv
%user%Recenteb.exe
%user%Recentenergy.dll
%user%Recentenergy.sys
%user%Recentexec.exe
%user%Recentexec.tmp
%user%Recentfan.drv
%user%RecentFS.drv
%user%RecentFS.exe
%user%Recentkernel32.drv
%user%RecentPE.sys
%user%Recentppal.exe

The next thing you can try to remove additional guard is to start an attempt at an automated removal with malwarebytes antimalware. You can find a download link for it on the virus removal toolkit page. While you’re there you may also want to download process explorer as you may need it a bit later in the removal.

If you are unable to install malwarebytes antimalware you may try the following things: 1) rename the installer from mbam-setup.exe to something like firefox.exe then retry your installation/update and run a scan 2) restart into safe mode with networking and retry the install/update and scan. 3) Continue with the next step of a manual removal of additional guard and then retry the install, update and scan after that is finished.

The following processes are associated with additional guard and should be killed off using the task manager. If you are unable to launch task manager you may try the following. 1) First copy the taskmgr.exe executable file, copy it to the desktop and then rename the file to something else like iexplore.exe and retry launching it. 2) reboot to safe mode and see if the processes below are running. 3) Use process explorer instead to kill off the following processes:

WIf9a.exe

The following files and folders should be deleted to fully remove additional guard:

%docsAll UsersApplication DataWINAGSys
%docs%All UsersApplication Data17c1fWIf9a.exe
%docs%All UsersApplication DataWINAGSyswinag.cfg
%user%Application DataAdditional Guard
%user%Application DataAdditional GuardInstructions.ini
%user%DesktopAdditional Guard.lnk
%user%Application DataMicrosoftInternet ExplorerQuick LaunchAdditional Guard.lnk
%user%Start MenuAdditional Guard.lnk
%user%Start MenuProgramsAdditional Guard.lnk

Even after you have completed your deletion of the above files you have completed the first part of the manual removal of additional guard. You should still install, update and run a scan with malwarebytes antimalware and a trusted antivirus application to make sure that your system is clean.

Related Posts

Blog Traffic Exchange Related Posts
  • How to Remove System Defender | System Defender Removal Guide System Defender is a rogue antivirus application that pushes itself to users through the use of scary popups and attack sites. The software, once it is installed will create numerous files and then claim that they are infected with viruses and they need to be cleaned. Of course, they cannot......
  • How to Remove SecureKeeper | Secure Keeper Removal SecureKeeper is a rogue antivirus application in the Wini family (with their recent new look user interface.) The Wini family is a very long running line of rogue security applications that have been producing two to three different rogues each week. Of course, the primary changes are the names, but......
  • How to Remove Windows Enterprise Suite | Removal Guide Windows Enterprise Suite is a rogue antivirus application that is made to look like and mimic the actions of legitimate security applications, but it is likely the cause of more problems on your system than it solves. It seems to be made by the same group as volcano security suite......
Blog Traffic Exchange Related Websites
  • Tools to Analyze Our Retirement Portfolio I admit to being somewhat obsessive in trying to find ways to analyze the different investments in our retirement portfolio.  My particular interest is, of course, portfolio survival:  Will our retirement investments provide a steady and reliable income so that we will not outlive our money. Many other baby boomers are......
  • Personal Finance Interview with Budget Pulse's Craig I’m doing two part interviews with bloggers on two of my personal sites. I’m excited to have Craig from Budget Pulse answer a few of my questions on this new project. The first part is here on Green Panda Treehouse. The second part is on Vega Baja Productions. If you’re......
  • Brisbane Marina, Brisbane, CA Phone: (650) 583-6975 Boat Launch? Yes, the marina offers this facility. Average Depth: 10 feet. Please be advised that this may change due to the season or to adverse weather conditions. It is always best to call ahead to check on current water levels before you arrive. Marine Standby......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site