Are there many antivirus programs in your computer? Is each one of them being installed with your permission? Have you just got this new one called Windows Maintenance Guard? Is it very aggressive and hard to uninstall? If you don’t want it to mess up with your computer, you have got to find a solution as soon as possible.
Windows Maintenance Guard is a malicious antivirus program that more and more computer users have come across. This fake virus protector is known to be a member of the Rogue.FakeVimes family. This new born virus has just been reported to damage innocent users’ computers. Being the latest version of Windows Secure Web Patch, it has a new appearance which is quite legitimate to trick with computer users. But there is only one final goal -to persuade you to buy its full version. This phenomenon has been known to many netizens as an online financial scam.
The most common ways to be infected with this new fake antivirus software include visiting illegal websites, downloading unknown programs, playing online gamblings and opening hacked spam emails. So you must be careful even if there is/are several genius antivirus tools in your computer. When the infection is done, Windows Maintenance Guard rogue will start a scan through your computer automatically. Scanning results are always severe to make you become nervous. Then lots of security alerts will pop up making you impossible to ignore them and keep annoyed by them. Through this forcible showing up of fake warnings, this scam program is trying to deceive you so that it can achieve its evil intention. But it is believed that none of the detected viruses, bugs, worms and other errors truly exist in your computer. They are just some fake statements that have been designed together with the virus. What would happen if you do believe what it tells you since no other ways can help you out? You will be requested to buy Windows Maintenance Guard full version so that it can complete the removal job and provide a further protection for your computer. You may not care this one time payment thing. But what you don’t know is that you have given out your bank account information to this scam while making the payment. Once you have realized that it’s a virus, please cancel your payment immediately or renew your account information. Then start right away to get rid of this nasty virus.
Following are some examples of fake security alerts that you may come across on your infected computer:
Warning
Firewall has blocked a program from accessing the Internet
C:\programs files\Internet Explorer\iexplore.exe
is suspected to have infected your computer. This type of virus intercepts entered data and transmits them to a remote server.
Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
1. Fake security alerts will slow down the whole processing of the computer till it’s stuck;
2. Any delay in removal could bring more viruses and malware to your computer without permission;
3. Your personal information will be captured by remote hosts to use in cyber crimes;
4. Icons from both desktop and start menu will be hidden leaving you an empty computer;
5. Files created by this rogue will be hidden into your disks and messing up your system;
6. Infected files will be brought as authorized ones in order to escape from antivirus programs.
As mentioned before that legitimate antivirus programs cannot 100% remove Windows Maintenance Guard virus, you will need to do the removal manually. That will require lots of knowledge of computer. Following are some steps for your consideration when you are doing this on your own. It is suggested to do a backup beforehand.
1. Reboot your infected computer and keep pressing F8 key on your keyboard and next use the arrow keys to select “Safe Mode with Networking” and press E/Enter;
2. Press Ctrl+Alt+Del at the same time or right click on the Task Bar to open the Windows Task Manager;
3. End the process [xxx].exe;
4. Find out and delete all these associating files as below:
%AppData%\NPSWF32.dll
%AppData%\Protector-.exe
%AppData%\Protector-.exe
%AppData%\result.db
%CommonStartMenu%\Programs\Windows Maintenance Guard.lnk
5. Find out and remove all these associating registry entries:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\{xxx}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Regedit32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current\Winlogon\”Shell” = “{xxx}.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
6. Reboot again and get into normal mode when the above steps are done.
Tips: It is strongly recommended to remove Windows Maintenance Guard fake program with expertise, because any mistake due to lacking of computer knowledge could lead to more damages till system goes crash down. So please contact YooCare Expert for a fast and professional help.
Published by on June 19, 2012 3:37 am, last updated on June 7, 2013 8:02 am
Leave a Reply
You must be logged in to post a comment.