The Windows Guard Solutions is a fake security applications made to look like a real AV program using fake online scans to make the user think they have been infected so they will download and install the rogue.
The Windows Guard Solutions creates fake pop-up alerts saying that the computer is infected using the Windows and other applications for the fake alerts and by blocking them from running used in the fake alert messages to scare users into purchasing the rogue application in order to clean their computers.
The Windows Guard Solutions includes in the registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current Version\Image File Execution Options, with hundreds of entries of the different legitimate Antivirus companies’ executable files to block them from being able to be ran.
Files and Locations:
XP
<Drive>:\DOCUMENTS AND SETTINGS\<USER>\APPLICATION DATA\Protector-<random Names>.exe
Win7
<Drive>:\USERS\<USER>\AppData\ROAMING\Protector-<Random Names>.exe
The Windows Guard Solutions rogue can be removed manually, however, because of blocking apps and possible infections by other malware that could have been included, it is best to use our Antivirus removal tool, VIPRE Antivirus.
You can download a free trial to remove the rogue by clicking on the link below:
http://www.vipreantivirus.com/Antivirus-Trial/VIPRE-Antivirus/
If you are unable to download and install our malware removal tool because the rogue has infected your computer and is not allowing you to install the program, you can use our VIPRE Rescue Disc here:
