How to Remove IGuardPC | IGuardPC Removal Guide



IGuardPC is one of the latest clones of the winisoft family of rogue antivirus applications. It is typically installed through the use of trojans and fake video codec and or (faked) flash player updates. This rogue will pop up warnings with the title Spyware Alert! and in it’s scans will find files (that it created) that it then claims are infected with viruses and should be cleaned up. As is usual…. these claims are false and they further say that nothing can be cleaned until you purchase their software. Please do not buy into this scam. Instead read on for how to remove iguardpc.


Your first stop for uninstalling any rogue is best to be the control panel and visit the add/remove programs area. You may try here to uninstall iguardpc. If this works then the rest of the cleanup is easy. All you should do is follow it up with a scan with a malware removal tool such as malwarebytes antimalware or superantispyware. Then follow that with a scan from a reputable antivirus application such as mcafee or norton or an online scan from a trusted source like trendmicro’s housecall.

You can find a download link for malwarebytes antimalware on my virus removal toolkit page. While you are there you may also wish to download process explorer as it may be useful later in this process. Once malwarebytes is downloaded try to install it. You may need to use a few tricks to get it installed and launch it for scanning. If you need to try the following tricks. 1) rename the installer file from mbam-setup.exe to iexplore.exe then retry the install, update and scan. 2) reboot into safe mode with networking and then try to install, update and scan. 3) follow the next part of a manual removal of iguardpc and after you have killed off the running processes associated with the rogue then retry the install, update and scan with malwarebytes antimalware or superantispyware.

The following programs are associated with this rogue and should be killed off with the task manager before continuing with the rest of the removal process. IF you are unable to launch task manager try the following: 1) copy the program for the task manager (taskmgr.exe) to the desktop, then rename it to something like firefox.exe and retry launching it. 2) reboot into safe mode and see if the programs listed are running. If not, then proceed with the next part of a manual removal of iguardpc. 3) use process explorer instead of task manager to terminate the running processes listed:

wz9m2c5.exe
195zthief4965.exe
iguardpc.exe
uninstall.exe
RANDOM.exe

Some of the file names listed above and below are made up unique to each install of iguardpc and you should use the patterns you see listed above, file locations below and what you see on your system to determine the correct programs to terminate and delete.

The following files and folders should be deleted to remove iguardpc:

%docs%All UsersDesktopIGuardPc.lnk
%docs%All UsersStart MenuProgramsIGuardPc
%docs%All UsersStart MenuProgramsIGuardPc1 IGuardPc.lnk
%docs%All UsersStart MenuProgramsIGuardPc2 Homepage.lnk
%docs%All UsersStart MenuProgramsIGuardPc3 Uninstall.lnk
%progfiles%IGuardPc Software
%progfiles%IGuardPc SoftwareIGuardPc
%progfiles%IGuardPc SoftwareIGuardPcIGuardPc.exe
%progfiles%IGuardPc SoftwareIGuardPcuninstall.exe
%win%100bz5eal8149.cpl
%win%10795wz9m2c5.exe
%win%10954worz351.ocx
%win%system32195zthief4965.exe
%win%system32197z3wo5m936.ocx
%win%system3219813virz579e.bin
%win%system32RANDOM.exe
%tmp%RANDOM.exe

After you have deleted the above you have completed the steps for a manual removal of iguardpc and should follow up with a scan with a malware remover to fix any registry clutter from the rogue. A good malware remover to use for a full scan would be either malwarebytes antimalware or superantispyware. Then you should follow THAT up with a scan from a trusted antivirus vendor such as Avira/AVG or trend micro.

Related Posts

Blog Traffic Exchange Related Posts
  • How to Remove Internet Security 2010 | Internet Security 2010 Removal Guide Internet Security 2010 is the name of a rogue antivirus application that is one of the more recent to be making the rounds. It will typically install itself on your system through the use of other malware. These rogue antivirus applications typically will pop up warnings and alerts about the......
  • How to Remove SiteAdware | SiteAdware Removal Guide SiteAdware is a rogue antivirus application that is typically installed without the computer users express permission. It is promoted through trojans and fake video codec or flash player updates. Once established on the sysem it will tend to do a falsified scan of your pc and claim that you have......
  • How to Remove SystemVeteran | Removal Guide SystemVeteran is (yet another) variation from the wini family of rogue antivirus applications. Their last one prior to this was BlockProtector (BlockProtector Removal Guide) but it is a VERY long lived family and they are churning out one variation every two to three days. Most of these have the same......
Blog Traffic Exchange Related Websites
  • Why You Need a Good Home Security System There are many unexpected things which can happen these days. The world can seem pretty cruel at times. This is when you want to be able to come home and feel safe. After all, your home is a place where you want to be able to feel your best......
  • virus scan is warning me that userinit.exe is trying to modify registry or startup? Everything I can find on userinit.exe tells me it is a crucial windows file, but I can't find anything telling me it should modify the registry. I'm concerned that it may be a virus disguised, is this possible? Why would my virus scan prompt me? I'm using charter (my cable......
  • How to Remove Antivirus 2009, Spyware Guard 2008 and Other Malware My wife, kids, and I spent this past Christmas at my parents' house. It wasn't long after we arrived before I gravitated to their computer to check my email, read the news, check the stock market, etc. Much to my dismay, I found a barrage of malware, spyware, and......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site