Information about Additional Guard
Additional Guard is a program, which masquerades as a legitimate and more than capable infection removal tool, but is actually a fake program, and a parasite, which is known for the illicit means it uses to spread and sell it's software. Additional Guard typically gains entrance to the system by using various trojans, and drive-by downloads, and relies on deception to trick users into purchasing it's "licensed version".
After infecting the system, Additional Guard spams the user with popups, claiming his system is infected. Though the apparent immediacy of the alert might urge the user to download Additional Guard, he should not do that, because these claims of infection have no basis whatsoever. Much like any other rogue, this one performs fake system scans, marking false positives, and asking for money in order to remove "detected" threats.
Additional Guard is a threat and should be removed immediatelly.
Parasite images
Additional Guard Facts
- Additional Guard pretends to increase security of your PC
- Additional Guard free version will show popups, alerts and fake results to convince you to pay
- Additional Guard creators will not deliver license keys upon paying or the full version will not be functional
- Additional Guard might be used to download and advertise other malicious software
- Additional Guard might disable some of your PCs or its programs functions
Manual Additional Guard removal instructions
cb.exe
exec.exe
ppal.exe
sqlite3.dll
ddv.dll
energy.dll
FS.dll
HKEY_CLASSES_ROOT\xp_7a9be.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL†= “http://search-gala.com/?&uid=220&q={searchTerms}â€
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures†= “1?
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL†= “http://search-gala.com/?&uid=220&q={searchTerms}â€
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Additional Guardâ€
%UserProfile%\Application Data\2565da61\278.mof
%UserProfile%\Application Data\2565da61\mozcrt19.dll
%UserProfile%\Application Data\2565da61\sqlite3.dll
%UserProfile%\Application Data\2565da61\AG.ico
%UserProfile%\Application Data\2565da61\AGSys
%UserProfile%\Application Data\2565da61\AGSys\vd952342.bd
%UserProfile%\Application Data\2565da61\ag.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Additional Guard.lnk
%UserProfile%\Application Data\Additional Guard\cookies.sqlite
%UserProfile%\Desktop\Additional Guard.lnk
%UserProfile%\Recent\cb.exe
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\dudl.drv
%UserProfile%\Recent\energy.dll
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\exec.exe
%UserProfile%\Recent\fan.drv
%UserProfile%\Recent\FS.dll
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\SICKBOY.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\Additional Guard.lnk
%UserProfile%\Start Menu\Programs\Additional Guard.lnk
%Program Files%\Mozilla Firefox\searchplugins\search.xml






No comments yet

