Free virus removal tool for WiniGuard

Written by Administrator | Friday, 04 December 2009 07:14

WiniGuard is a rogue, ie malware that pretends to be an Antivirus when in reality WiniGuard is the malware. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares in your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is WiniGuard. It invites you to purchase a license to remove all malwares on your system, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you.

echo-antivirus

To remove WiniGuard

Download the removal tool for WiniGuard
Extract it
Launch
Click on the delete button

WiniGuard will be removed from your system in 10s. Restart your computer when it’s finished.

After running the patch, your homepage Internet Explorer becomes search.net-studio.org, done deliberately to erase all traces of then malware, BHOs (Browser Helper Object) are also deleted. You can always restore this setting in Internet Explorer options.

Processes :

WiniGuard.exe

Files :

%CommonDesktopDir%\WiniGuard.lnk
%CommonPrograms%\WiniGuard\Uninstall.lnk
%CommonPrograms%\WiniGuard\WiniGuard Home.lnk
%CommonPrograms%\WiniGuard\WiniGuard.lnk
%UserProfile%\Start Menu\WiniGuard 1.32.lnk
%UserProfile%\Start Menu\Programs\WiniGuard\WiniGuard 1.32.lnk
%UserProfile%\Start Menu\Programs\WiniGuard\WiniGuard Website.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\WiniGuard 1.32.lnk
%UserProfile%\Desktop\WiniGuard.lnk
%ProgramFiles%\Innovagest 2000 SL\WiniGuard\data.bin
%ProgramFiles%\Innovagest 2000 SL\WiniGuard\license.txt
%ProgramFiles%\Innovagest 2000 SL\WiniGuard\logaes.dll
%ProgramFiles%\Innovagest 2000 SL\WiniGuard\uninstall.exe
%ProgramFiles%\Innovagest 2000 SL\WiniGuard\WiniGuard.exe
%ProgramFiles%\WiniGuard\WiniGuard.exe
%ProgramFiles%\WiniGuard\WiniGuard.url
%ProgramFiles%\WiniGuard\uninst.exe
%ProgramFiles%\WiniGuard\Lang\English.ini
%UserProfile%\My Documents\WiniGuard\SDBHO.dll
%UserProfile%\My Documents\WiniGuard\sdcfg.dat
%ProgramFiles%\WiniGuard\blacklist.txt
%ProgramFiles%\WiniGuard\msvcp71.dll
%ProgramFiles%\WiniGuard\msvcr71.dll
%ProgramFiles%\WiniGuard\sdev.sgn

Folder

%UserProfile%\My Documents\WiniGuard\Logs
%UserProfile%\My Documents\WiniGuard\Quarantine
%UserProfile%\Start Menu\Programs\WiniGuard
%UserProfile%\My Documents\WiniGuard
%ProgramFiles%\WiniGuard
%ProgramFiles%\WiniGuard\Lang
%CommonPrograms%\WiniGuard
%ProgramFiles%\Innovagest 2000 SL
%ProgramFiles%\Innovagest 2000 SL\WiniGuard

Registry

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WiniGuard
HKEY_LOCAL_MACHINE\SOFTWARE\WiniGuard
HKEY_CURRENT_USER\Software\WiniGuard

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- WiniGuard = "%ProgramFiles%\Innovagest 2000 SL\WiniGuard\WiniGuard.exe -min"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WiniGuard
- DisplayName = "WiniGuard"
- UninstallString = ""%ProgramFiles%\Innovagest 2000 SL\WiniGuard\uninstall.exe""
- NoModify = 0x00000001
- NoRepair = 0x00000001
HKEY_LOCAL_MACHINE\SOFTWARE\WiniGuard
- Install_Dir = "%ProgramFiles%\Innovagest 2000 SL\WiniGuard"
HKEY_CURRENT_USER\Software\WiniGuard
- AgentsSettings = 0x00000001