Tuesday, June 19, 2012

Get rid of Windows Maintenance Guard fake antispyware and virus that can install itself in the presence of low quality or out-of-date security suites

Windows Maintenance Guard is a fake antivirus ready to deal with genuine applications. It has been observed to successfully download and install its executables onto computer system protected with one or several security solutions.
That is the matter of quality of the protection those products can provide and has actually provided – not much better than that by the phony security tool.
If the rogue antispyware has managed to perform its installation in the presence of your current antivirus products, it is not recommended to rely on those programs any longer. Remove Windows Maintenance Guard  malware using trusted security solution that would not let the rogue install into your PC, had it had been installed itself in a good time.
Following this link activates free scanner that will remove Windows Maintenance Guard  and other viruses, and then remain to guard your PC.

Windows Maintenance Guard screenshot:

Windows Maintenance Guard activation code (helps removal):
0W000-000B0-00T00-E0020
NOTE: "Activating" Windows Maintenance Guard is not enough. You need to remove related trojans \ rootkits using reliable malware removal solution.
It is important to fix Windows registry after Windows Maintenance Guardmalware removal using safe registry cleaner software.

Windows Maintenance Guard manual removal guide:

Delete infected files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[random 3 characters].exe
%AppData%\Protector-[random 4 characters].exe
%AppData%\W34r34mt5h21ef.dat
%AppData%\result.db
%CommonStartMenu%\Programs\Windows Maintenance Guard.lnk
%Desktop%\Windows Maintenance Guard.lnk
Delete Windows Maintenance Guard registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorAdmin” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorUser” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “EnableLUA” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-4-27_2″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “tovvhgxtud”
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\[random].exe

No comments: