Windows Guard Solutions

Windows Guard Solutions Description

Type: Rogue AntiSpyware Programs

ScreenshotYou should not be fooled by Windows Guard Solutions' name and appearance; this supposed anti-virus application is really a malware infection that is part of the Rogue:FakeVimes family of malware. Windows Guard Solutions carries out the typical rogue anti-virus scam, using fake error messages to induce panic in its victims. Once the victim believes their computer is infected with malware, Windows Guard Solutions will attempt to convince the victim to purchase a useless upgrade for this fake security program. Windows Guard Solutions impersonates an actual security program and borrows heavily from the interfaces of common security applications. However, trying to use Windows Guard Solutions to fix a malware problem simply results in error messages claiming that an expensive "full version" of Windows Guard Solutions is needed to fix the problems.

While all of this may be annoying, a Windows Guard Solutions infection is often accompanied by other severe problems on the infected computer system. For example, a computer infected with Windows Guard Solutions will often become slow and unresponsive, crash frequently, and have problems connecting to the Internet. Because of this, Windows Guard Solutions should be removed immediately. To do this, ESG security analysts advise using a very strong anti-malware program, preferably with anti-rootkit capabilities.

Taking a Look at the Windows Guard Solutions Scam

The Windows Guard Solutions interface is made to resemble the interface for Microsoft Security Center and other common anti-virus programs. However, beyond Windows Guard Solutions' capability to display error messages and its authentic-looking interface, ESG security researchers have not detected any actual anti-virus capabilities. The FakeVimes family of rogue anti-virus programs has been active in the wild since 2009 and Windows Guard Solutions belongs to a subdivision of this family released after 2012. Examples of clones of Windows Guard Solutions include Virus Melt, Presto TuneUp, Fast Antivirus 2009, Extra Antivirus, Windows Security Suite, Smart Virus Eliminator, Packed.Generic.245, Volcano Security Suite, Windows Enterprise Suite, Enterprise Suite, Additional Guard, PC Live Guard, Live PC Care, Live Enterprise Suite, Security Antivirus, My Security Wall, CleanUp Antivirus, Smart Security, Windows Protection Suite, Windows Work Catalyst.

Belonging to a more modern iteration of the FakeVimes family of malware, these fake security programs are often bundled with a rootkit component that can make their removal difficult. They will also severely decrease the infected computer's security and cause browser redirects to websites associated with Windows Guard Solutions. Other ways in which the infected computer's web browser can be affected include problems connecting to the Internet, in particular to websites related to computer security. When attempting to connect to these websites, an error message will be displayed instead.ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

Technical Information

Screenshots & Other Imagery

SpyHunter Detects & Remove Windows Guard Solutions

Windows Guard Solutions Video

Tip: Turn your sound ON and watch the video in Full Screen mode.

File System Details

Windows Guard Solutions creates the following file(s):
# File Name MD5 Detection Count
1 Protector-haid.exe c94023f64598bd1873ff8c45d3862a53 23
2 Protector-pvou.exe 633a03bba169e23d68a56f79ec20c24c 1
3 %AppData%\Inspector-[RANDOM CHARACTERS].exe N/A
4 %AppData%\npswf32.dll N/A
5 %CommonPrograms%\Windows Guard Solutions.lnk N/A
6 %DesktopDir%\Windows Guard Solutions.lnk N/A

Registry Details

Windows Guard Solutions creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"

More Details on Windows Guard Solutions

The following messages associated with Windows Guard Solutions were found:
Error
Attempt to modify Registry key entries detected.
Registry entry analysis recommended.
Error
Attempt to run a potentially dangerous script detected.
Full system scan is a highly recommended.
Error
Keylogger activity detected. System information security is at risk. It is recommended to activate protection and run a full system scan.
Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
Warning
Firewall has blocked a program from accessing the Internet
C:\program files\internet explorer\iexplore.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Warning! Spambot detected!
Attention! A spambot sending viruses from your e-mail has been detected on your PC.

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.