Thursday, May 5, 2011

PC Security Guardian Removal Guide

PC Security Guardian Removal Guide
PC Security Guardian is a fake antivirus program that try to trick the user to buy the full version of PC Security Guardian by using fake scan results. PC Security Guardian installs itself into the computer without confirmation of the user unless the user set the UAC level to the highest level. PC Security Guardian start itself when the computer boot and scan the computer automatically and produce fake scan result and keep on warning the users to buy the full version of PC Security Guardian. PC Security Guardian is advertised mostly through the use of bogus online scanners and malicious websites. .

PC Security Guardian can be removed by stopping the processes and removing the files by using Emsisoft HiJackFree. Then the user should remove the registry entries added or modified by PC Security Guardian shown in the removal guide below. All files related to PC Security Guardian must be deleted.

PC Security Guardian should be removed immediately.


PC Security Guardian Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options "Debugger" = "svchost.exe"
HKCR\PersonalSS.DocHostUIHandler
HKCU\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "PC Security Guardian"
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1"

Remove Folders and Files
%AppData%\PC Security Guardian\cookies.sqlite
%AppData%\PC Security Guardian\Instructions.ini
%AppData%\PC Security Guardian
%CommonAppData%\[random]

No comments:

Post a Comment