Additional Guard Removal Process (remove AdditionalGuard)
November 27, 2009 – 12:34 pmAdditional Guard
Additional Guard is a rogue security program. Additional Guard, like other rogue anti-spyware applications, is able to mislead computer users into purchasing a full version of the fake security app. Additional Guard will attempt this process through fake system scan results and annoying parasite threat popup messages.
Additional Guard is not a viable security program and should never be trusted to rid your system of spyware. Removal of Additional Guard is recommended to be performed that instant that it is detected on your computer.
Are you getting popups from Additional Guard? Have you identified that you have Additional Guard installed on your computer? Do you wish to remove Additional Guard completely from your computer?
Why should you remove Additional Guard?
If Additional Guard resides on your computer, it can potentially damage your personal files or you may end up losing data stored on your system. Research has shown that Additional Guard may have the ability to make your computer vulnerable to remote attacks which could result, initially, in loss of money, possibly identity theft, and, eventually, a painstaking Additional Guard removal process.
How can you manually remove Additional Guard
Manual removal of Additional Guard may not be for everyone. Each manual Additional Guard removal step must be followed delicately to completely remove all related files and registry entries from your computer. If you are unsure or have doubts about editing your system registry, then we recommend that you use the automatic Additional Guard removal process.
Additional Guard can be removed manually by following the steps below.
- With all programs closed, click the Start Menu and go to the Control Panel.
- Locate the Add/Remove Programs icon and double click it.
- Locate Additional Guard in the list of programs. If you find it, select it and remove it. If you cannot find Additional Guard, you can continue to step 5.
- Restart your computer.
- Close all open programs and windows on your desktop.
- Open your registry editor (regedit) program by going to Start Menu, type in regedit, and click OK.
- Find all of the following registry entries and delete them. If you do not know how to do this,
then you can read how to edit the registry in Windows.HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=220&q={searchTerms}"HKEY_CLASSES_ROOT\xp_7a9be.DocHostUIHandlerHKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=220&q={searchTerms}"HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1?HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Additional Guard"
-
You may need to return to this removal process for removing Additional Guard. You can do this easily by bookmarking or adding a favorite to this page by clicking here. If you are using the FireFox web browser you can press the keys Ctrl and D simultaneously to bookmark this page.
Image 1. Bookmark PCHubs removal process
-
Delete all of the following files that are associated with Additional Guard from your computer.
%Program Files%\Mozilla Firefox\searchplugins\search.xml%UserProfile%\Application Data\2565da61\278.mof%UserProfile%\Application Data\2565da61\ag.cfg%UserProfile%\Application Data\2565da61\AG.ico%UserProfile%\Application Data\2565da61\AG345d.exe%UserProfile%\Application Data\2565da61\AGSys%UserProfile%\Application Data\2565da61\AGSys\vd952342.bd%UserProfile%\Application Data\2565da61\mozcrt19.dll%UserProfile%\Application Data\2565da61\sqlite3.dll%UserProfile%\Application Data\Additional Guard%UserProfile%\Application Data\Additional Guard\cookies.sqlite%UserProfile%\Application Data\Additional Guard\Instructions.ini%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Additional Guard.lnk%UserProfile%\Desktop\Additional Guard.lnk%UserProfile%\Recent\ANTIGEN.drv%UserProfile%\Recent\ANTIGEN.tmp%UserProfile%\Recent\cb.exe%UserProfile%\Recent\cid.dll%UserProfile%\Recent\CLSV.tmp%UserProfile%\Recent\ddv.dll%UserProfile%\Recent\dudl.drv%UserProfile%\Recent\eb.drv%UserProfile%\Recent\eb.exe%UserProfile%\Recent\energy.dll%UserProfile%\Recent\energy.sys%UserProfile%\Recent\exec.exe%UserProfile%\Recent\exec.tmp%UserProfile%\Recent\fan.drv%UserProfile%\Recent\FS.dll%UserProfile%\Recent\FS.drv%UserProfile%\Recent\FS.exe%UserProfile%\Recent\kernel32.drv%UserProfile%\Recent\PE.drv%UserProfile%\Recent\PE.sys%UserProfile%\Recent\ppal.exe%UserProfile%\Recent\SICKBOY.tmp%UserProfile%\Recent\tjd.sys%UserProfile%\Start Menu\Additional Guard.lnk%UserProfile%\Start Menu\Programs\Additional Guard.lnkAdditional GuardAdditional Guard.lnkc:\Documents and Settings\All Users\Application Data\117fcc:\Documents and Settings\All Users\Application Data\117fc\2414.mofc:\Documents and Settings\All Users\Application Data\117fc\mozcrt19.dllc:\Documents and Settings\All Users\Application Data\117fc\Quarantine Itemsc:\Documents and Settings\All Users\Application Data\117fc\sqlite3.dllc:\Documents and Settings\All Users\Application Data\117fc\WI339.exec:\Documents and Settings\All Users\Application Data\117fc\WINAG.icoc:\Documents and Settings\All Users\Application Data\117fc\WINAGSysc:\Documents and Settings\All Users\Application Data\117fc\WINAGSys\vd952342.bdc:\Documents and Settings\All Users\Application Data\WINAGSysc:\Documents and Settings\All Users\Application Data\WINAGSys\winag.cfgc:\Program Files\Mozilla Firefox\searchplugins\search.xmlIf you need a better understanding on how to search for these files then you can read how to find and search for files and folders here.
If you have issues deleting any of the previously listed files that are associated with Additional Guard, you can try rebooting your computer into safe mode. Booting into safe mode may allow certain malicious files to be deleted. If you are wondering how to boot into safe mode, you can read our process for starting a computer in safe mode here.
Image 2. Select "Safe Mode with Networking"
After locating and deleting the previous files you must remove all directories associated with Additional Guard by going to the C:\ProgramFiles\Additional Guard folder, select it, and delete it. In some cases you may not be able to find this directory. You can still continue to the next step.
Restart your computer. You do not need to boot into safe mode at this point. You should have removed Additional Guard completely from your computer. If you find that Additional Guard is still on your computer, you can repeat the steps again or go to the automatic Additional Guard removal process.

Run FREE PC Scanner Now!

