Free removal tool to remove Security Guard 2012

Written by Administrator | Wednesday, 05 October 2011 16:19

Security Guard 2012 is a another rogue Antispyware from the OpenCloud familly, it's a malware that pretends to be an Antivirus. Security Guard 2012 conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Security Guard 2012. Security Guard 2012 invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Security Guard 2012 immediately from your system.

Security Guard 2012

To remove Security Guard 2012 (Uninstall Security Guard 2012)

Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
Choose Start computer in SAFE MODE with network support
Open Internet Explorer
Go to Tools => Internet Options => Connections Tab => LAN Settings
Uncheck "Use a proxy server"
Recheck "Automatically detect settings"
Download this free removal tool for Security Guard 2012
Extract it
Launch
Click on the delete button

Security Guard 2012 will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

[random].exe

Files :

%AppData%\[RANDOM FOLDER 1]
%AppData%\[RANDOM FOLDER 2]
%AppData%\[RANDOM FOLDER 3]
%Programs%\Security Guard 2012
%AppData%\[RANDOM]\Security Guard 2012.ico
%AppData%\ldr.ini
%Desktop%\Security Guard 2012.lnk
%Programs%\Security Guard 2012\Security Guard 2012.lnk
%Temp%\[RANDOM NUMBERS].tmp
%System%\[RANDOM].exe

Registry

Registry created values:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- [RANDOM] = "%System%\[RANDOM].exe"
HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\C0AB6693AB3202B4B9D95716ED5CE4A6\SourceList
- LastUsedSource = "n;1;%ProgramFiles%\Common Files\Wise Installation Wizard\"

Registry deleted values:

HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\C0AB6693AB3202B4B9D95716ED5CE4A6\SourceList
- LastUsedSource = "n;1;%ProgramFiles%\Common Files\Wise Installation Wizard\"

Registry modified values:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\ServiceCurrent
- (Default) =
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceCurrent
- (Default) =

Remove Security Guard 2012 Software manually :

Restart your computer in safe mode :
- Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
- Choose Start computer in SAFE MODE
Open the infected account
Open explorer, paste into the address bar the text %Temp% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Temp on my computer
Remove all .exe files and all random folders under this path
Open explorer, paste into the address bar the text %AppData% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Application Data on my computer
Remove all .exe files and all random folders under this path and the Security Guard 2012 folder
Remove Security Guard 2012.lnk from your desktop
Remove Security Guard 2012.lnk from your start menu
Click on the start menu button then click on run
Type msconfig and press enter
Go to the Startup tab
Uncheck all random character keys in it and click on the OK button
Restart your computer in normal mode