English
If You Need Expert Help we recommend you hire a Ninja! Ninja's are well trained in the art of virus removal and can remove all threats from your computer right now. See this Security Guard is a rogue spyware program that is related to the well known fake security software Cleanup Antivirus. Security Guard tries to trick users into purchasing its license. It enters a user’s computer via Trojans or other malicious software that download and install Security Guard. Once installed, this rogue software creates a number of harmless files on the hard disk. Then it will endlessly perform fake system scans and return results and flag the above created harmless files as security threats. This is an aggressive technique used to stop the user from trying to manually remove Security Guard. This rogue software then proceeds to insist that the user should buy a license to the ‘full’ version of Security Guard, claiming that the currently installed ‘trial’ version is inadequate to clean the system of the falsely generated ‘threats’. Whenever the program is run, it will enforce this request through its GUI and through various pop-ups. However, the so-called ‘full’ version has no capability whatsoever to scan or clean your computer, and you should never fall for this trick and buy the software.
Security Guard
» Download Security Guard Removal Software
As soon as you find a copy of this malicious software on your computer, you should take steps to remove Security Guard. Security Guard removal is a process which involves the stopping of processes, the unregistering of DLLs, deletion of files and folders and the removal of registry entries.
Automatic Security Guard Removal
Online Security Guard Removal Service
Security Guard Manual Removal Procedures
The first step you need to take in order to delete Security Guard is to stop the following processes:
- SG345d.exe
- cb.exe
- energy.exe
- exec.exe
- grid.exe
- kernel32.exe
- SICKBOY.exe
The next step in Security Guard removal is to unregister the following DLL files:
- mozcrt19.dll
- sqlite3.dll
- cid.dll
- eb.dll
Next, it is necessary to remove the following files and folders:
- c:Documents and SettingsAll UsersApplication Data345d567
- c:Documents and SettingsAll UsersApplication Data345d56724.mof
- c:Documents and SettingsAll UsersApplication Data345d567mozcrt19.dll
- c:Documents and SettingsAll UsersApplication Data345d567SG345d.exe
- c:Documents and SettingsAll UsersApplication Data345d567SGD.ico
- c:Documents and SettingsAll UsersApplication Data345d567sqlite3.dll
- c:Documents and SettingsAll UsersApplication Data345d567BackUp
- c:Documents and SettingsAll UsersApplication Data345d567Quarantine Items
- c:Documents and SettingsAll UsersApplication Data345d567SGDSys
- c:Documents and SettingsAll UsersApplication Data345d567SGDSysvd952342.bd
- c:Documents and SettingsAll UsersApplication DataSGZIQYEXRD
- c:Documents and SettingsAll UsersApplication DataSGZIQYEXRDSGWNLED.cfg
- %UserProfile%Application DataSecurity Guard
- %UserProfile%Application DataSecurity Guardcookies.sqlite
- %UserProfile%Application DataSecurity GuardInstructions.ini
- %UserProfile%DesktopSecurity Guard.lnk
- %UserProfile%RecentANTIGEN.sys
- %UserProfile%RecentANTIGEN.tmp
- %UserProfile%Recentcb.exe
- %UserProfile%Recentcid.dll
- %UserProfile%Recentddv.sys
- %UserProfile%Recenteb.dll
- %UserProfile%Recenteb.drv
- %UserProfile%Recentenergy.exe
- %UserProfile%Recentexec.exe
- %UserProfile%Recentexec.tmp
- %UserProfile%Recentfan.drv
- %UserProfile%Recentfix.tmp
- %UserProfile%Recentgrid.exe
- %UserProfile%Recentkernel32.exe
- %UserProfile%Recentrunddlkey.drv
- %UserProfile%RecentSICKBOY.exe
- %UserProfile%Recenttempdoc.tmp
- %UserProfile%Start MenuSecurity Guard.lnk
- %UserProfile%Start MenuProgramsSecurity Guard.lnk
- c:Program FilesMozilla Firefoxsearchpluginssearch.xml
If you find this threat too hard to remove yourself and need an expert we recommend www.pcninja.com . They charge far less than others and are great at what they do.
Security Guard Registry Removal Proedures
Removing files and folders alone is not sufficient to completely remove Security Guard. The following keys and settings should also be removed from the Windows registry to complete Security Guard removal:
- HKEY_CURRENT_USERSoftware3
- HKEY_CLASSES_ROOTSG345d.DocHostUIHandler
- HKEY_USERS.DEFAULTSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://findgala.com/?&uid=1002&q={searchTerms}"
- HKEY_CURRENT_USERSoftwareClassesSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://findgala.com/?&uid=1002&q={searchTerms}"
- HKEY_CURRENT_USERSoftwareMicrosoftInternet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"
- HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = "1"
- HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings5.0User AgentPost Platform "layout/2.01002"
- HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Security Guard"
- HKEY_CLASSES_ROOTSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://findgala.com/?&uid=1002&q={searchTerms}"
Once you have cleaned the registry, your computer is safe from Security Guard. In order to make sure of this fact it is recommended to scan the entire PC using legitimate security products such as Spyware Doctor with Antivirus for the reason that additional traces of Security Guard’s presence or even further malware infections may be present in the system.
Security Guard Directories:
- c:Documents and SettingsAll UsersApplication Data345d567
Vista and Windows 7 users will find the trace under the user account and App Data
Conclusion
It is not recommended for inexperienced users to attempt to delete Security Guard manually, as any mistake made during removal could result in your system getting damaged. Therefore, inexperienced users are advised to use a web-based repair service such as www.pcninja.com or legitimate antivirus software such as Spyware Doctor with Antivirus to completely and safely remove Security Guard.
Other Software clients that Removevirus.org likes to use
- Spyware Doctor with Antivirus
- Norton
- Trend Micro
- Kaspersky
- AVG
- MalareBytes
My name is Jacob and I run the RemoveVirus.org website with several other pros. Our virus removal guides are the most indepth guides around and provide real solutions. If you purchase an Antivirus Client we endorse on this site from one of the links we do make a commision. This helps us run and maintain the virus removal website. To date we have helped ten's of thousands if not hundreds of thousands of people remove their virus threats.
