How to Remove Additional Guard | Additional Guard Removal Guide



Additional Guard is a rogue antivirus application and like many of these it can either be installed with or without the users permission. Even without a person actually wanting it, but simply visiting the wrong web page users may find this program on their system. Once on their system this software will popup many ads and warnings. It will claim that your computer is infected with many viruses and has many problems that only it can fix and of course, it CAN’T fix them unless you pay. It’s really a scam that will cost you money and not solve any problems. Read on for how to remove additional guard.


You may wish to start with the control panel and attempt to uninstall additional guard via the control panels add/remove programs applet. This may work and if it does that is almost as easy as rogue antivirus removals get. You still would want to scan your system with a tool such as malwarebytes antimalware and run a virus scan with a trusted antivirus product.

Among the warnings you may see from this rogue are the following:

System alert!
Suspicious software which may be malicious has been
detected on your PC. Click here to remove this threat
immediately using Additional Guard.

System message
Your PC may still infected with dangerous viruses.
Additional Guard protection is needed to prevent data loss
and avoid theft of your personal data and credit card details.
Click here to activate protection.

Warning! Virus Detected
Threat detected: Trojan-PSW.Win32.Dripper

Additional Guard also creates the following files to later claim they have viruses:

%user%RecentANTIGEN.drv
%user%RecentANTIGEN.tmp
%user%Recentcid.dll
%user%RecentCLSV.tmp
%user%Recentddv.dll
%user%Recenteb.drv
%user%Recenteb.exe
%user%Recentenergy.dll
%user%Recentenergy.sys
%user%Recentexec.exe
%user%Recentexec.tmp
%user%Recentfan.drv
%user%RecentFS.drv
%user%RecentFS.exe
%user%Recentkernel32.drv
%user%RecentPE.sys
%user%Recentppal.exe

The next thing you can try to remove additional guard is to start an attempt at an automated removal with malwarebytes antimalware. You can find a download link for it on the virus removal toolkit page. While you’re there you may also want to download process explorer as you may need it a bit later in the removal.

If you are unable to install malwarebytes antimalware you may try the following things: 1) rename the installer from mbam-setup.exe to something like firefox.exe then retry your installation/update and run a scan 2) restart into safe mode with networking and retry the install/update and scan. 3) Continue with the next step of a manual removal of additional guard and then retry the install, update and scan after that is finished.

The following processes are associated with additional guard and should be killed off using the task manager. If you are unable to launch task manager you may try the following. 1) First copy the taskmgr.exe executable file, copy it to the desktop and then rename the file to something else like iexplore.exe and retry launching it. 2) reboot to safe mode and see if the processes below are running. 3) Use process explorer instead to kill off the following processes:

WIf9a.exe

The following files and folders should be deleted to fully remove additional guard:

%docsAll UsersApplication DataWINAGSys
%docs%All UsersApplication Data17c1fWIf9a.exe
%docs%All UsersApplication DataWINAGSyswinag.cfg
%user%Application DataAdditional Guard
%user%Application DataAdditional GuardInstructions.ini
%user%DesktopAdditional Guard.lnk
%user%Application DataMicrosoftInternet ExplorerQuick LaunchAdditional Guard.lnk
%user%Start MenuAdditional Guard.lnk
%user%Start MenuProgramsAdditional Guard.lnk

Even after you have completed your deletion of the above files you have completed the first part of the manual removal of additional guard. You should still install, update and run a scan with malwarebytes antimalware and a trusted antivirus application to make sure that your system is clean.

Related Posts

Blog Traffic Exchange Related Posts
  • How to Remove ActiveSecurity | Active Security Removal Guide ActiveSecurity is a rogue antivirus application that uses graphics to indicate a similarity with Microsoft Security Center. It installs via malware including trojans and brings several files along with it when it installs that it then claims are viral and that in order to clean up the mess the user......
  • How to Remove Live PC Care | Live PC Care Removal Guide Live PC Care is a rogue antivirus application that is advertised and promoted through misleading ads and aggressive tactics. In many cases the ad may be an animation of a scan of a computer that claims to find viruses and you must click a link to fix the problem. This......
  • How to Remove SecureKeeper | Secure Keeper Removal SecureKeeper is a rogue antivirus application in the Wini family (with their recent new look user interface.) The Wini family is a very long running line of rogue security applications that have been producing two to three different rogues each week. Of course, the primary changes are the names, but......
Blog Traffic Exchange Related Websites
  • Game Preview: Florida Gators vs. Mississippi State Bulldogs Turnovers are Sticking in the Mind of Urban Meyer! With a game against Mississippi State pending, Urban Meyer is looking at the team's current capabilities to determine whether or not the Florida Gators are going to continue their winning streak for another round. In terms of the offense, the gators......
  • Brisbane Marina, Brisbane, CA Phone: (650) 583-6975 Boat Launch? Yes, the marina offers this facility. Average Depth: 10 feet. Please be advised that this may change due to the season or to adverse weather conditions. It is always best to call ahead to check on current water levels before you arrive. Marine Standby......
  • Common Mistakes in Using Retirement Planning Tools Online retirement planning tools are all over the Internet. Many baby boomers use these ¬†tools to help them get back on track or to assess where they are in being prepared for retirement. I have discussed a number of those online tools here at Go To Retirement. Some are free......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site