Threat Database Rogue Anti-Spyware Program Windows Microsoft Guardian

Windows Microsoft Guardian

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 6
First Seen: June 28, 2011
Last Seen: January 8, 2020
OS(es) Affected: Windows

Windows Microsoft Guardian Image

Windows Microsoft Guardian is a malicious security program that pretends to be a legitimate anti-spyware application. In reality, Windows Microsoft Guardian is unable to detect and remove any real malware infections. Windows Microsoft Guardian is a total scam which is a part of the Microsoft Security Essentials alert infection. Windows Microsoft Guardian will show lots of fake security alerts and warnings, detect false viruses in order to intimidate you and make you think in some threat that does not exist. Windows Microsoft Guardian will block legitimate Windows programs declaring that they are malicious. Thus, you will be unable to run some applications that include anti-virus software. Of course, like falsified scan results, all of these security alerts and warnings are fake. Windows Microsoft Guardian only aims at misleading you and hopes that you will next purchase its supposed full version which is paid. So, you should stay away of Windows Microsoft Guardian. During installation, Windows Microsoft Guardian will be configured to start automatically when Windows boots up. When Windows Microsoft Guardian is initiated, it will execute a bogus system scan and detect that your computer is infected with numerous malware threats. Next, Windows Microsoft Guardian will urge you to buy its "full version" to repair allegedly found parasites. The scan results illustrated by Windows Microsoft Guardian are not real. So you can safely reject the scan results that Windows Microsoft Guardian provides you. Do not waste your money on Windows Microsoft Guardian and remove it as quickly as possible.ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

SpyHunter Detects & Remove Windows Microsoft Guardian

File System Details

Windows Microsoft Guardian may create the following file(s):
# File Name MD5 Detections
1. ebsbje.exe 5ce600445bb09eedf432a78441090671 1
2. %AppData%\Microsoft\{RANDOM CHARACTERS}.exe
3. Uninstall Windows Microsoft Guardian.lnk
4. Windows Microsoft Guardian.lnk

Registry Details

Windows Microsoft Guardian may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe | Debugger
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | Shell = “%AppData%\Microsoft\{RANDOM CHARACTERS}.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe | Debugger

Messages

The following messages associated with Windows Microsoft Guardian were found:

Check your computer security
There are multiple security problems with your
computer.
Check this notification to fix these problems.
Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click ‘show details’ to learn more.
System reboot error has occurred due to lsass.exe system process failure.
This may be caused by severe malware infections.
Automatic restore of lsass.exe backup copy completed.
The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.
Warning
There`s a suspicious fsoftware running on your PC.
For more details, run a system file check.
Warning!
Location: …\mbam.exe
Viruses: Trojan.Win32.Qhost

Trending

Most Viewed

Loading...