By Jim
Updated on Sunday, March 7th, 2010
Dr. Guard is another fake anti-spyware targeted at gullible Web users. First, a free downloadable trial version is placed in websites affiliated with this scare-ware. Basically, the moment you land on these websites, they’ll announce that your PC is infected with spyware. They’ll most likely run a fake scan to really make it appear that the site has the capability of detecting infections.
Once they’ve captured your attention, you’ll be directed to the free downloadable trial version of Dr. Guard. Of course, this program is really a trojan designed to scare you some more. But since it’s free, most Web users will be tempted to click that ‘download’ button without thinking of the possible consequences.
That’s right, scaring is the name of the game for these malware. The intention is to get you scared enough to purchase their so-called full version. So how will this program proceed with scaring you?
Once inside, the trojan will attack your Windows registry. This is done to gain full control of your computer the moment you boot it up. After your next boot up, you’ll then start seeing pop-up alerts, fake scans, and even fake detections. This will make you believe that Dr. Guard is really doing its job.
Again, these are all fake, so don’t get tempted on buying that full version of Dr. Guard.
Symptoms Of Infection
- Your computer is acting slow. Dr. Guard slow down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. Dr. Guard infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious Dr. Guard infection.
Dangers Of Infection
Viruses like Dr. Guard will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.
Some Dr. Guard infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Uninstall Dr. Guard Processes
uninstall.exe
asr64_ldm.exe
Delete Dr. Guard Files
c:\Documents and Settings\[User]\Desktop\Dr. Guard.lnk
c:\Documents and Settings\[User]\Start Menu\Programs\Dr. Guard
c:\Documents and Settings\[User]\Start Menu\Programs\Dr. Guard\About.lnk
c:\Documents and Settings\[User]\Start Menu\Programs\Dr. Guard\Activate.lnk
c:\Documents and Settings\[User]\Start Menu\Programs\Dr. Guard\Buy.lnk
c:\Documents and Settings\[User]\Start Menu\Programs\Dr. Guard\Dr. Guard Support.lnk
c:\Documents and Settings\[User]\Start Menu\Programs\Dr. Guard\Dr. Guard.lnk
c:\Documents and Settings\[User]\Start Menu\Programs\Dr. Guard\Scan.lnk
c:\Documents and Settings\[User]\Start Menu\Programs\Dr. Guard\Settings.lnk
c:\Documents and Settings\[User]\Start Menu\Programs\Dr. Guard\Update.lnk
c:\Documents and Settings\[User]\Application Data\Microsoft\Internet Explorer\Quick Launch\Dr. Guard.lnk
c:\Program Files\Dr. Guard
c:\Program Files\Dr. Guard\about.ico
c:\Program Files\Dr. Guard\activate.ico
c:\Program Files\Dr. Guard\buy.ico
c:\Program Files\Dr. Guard\drg.db
c:\Program Files\Dr. Guard\drgext.dll
c:\Program Files\Dr. Guard\drghook.dll
c:\Program Files\Dr. Guard\drguard.exe
c:\Program Files\Dr. Guard\help.ico
c:\Program Files\Dr. Guard\scan.ico
c:\Program Files\Dr. Guard\settings.ico
c:\Program Files\Dr. Guard\splash.mp3
c:\Program Files\Dr. Guard\uninstall.exe
c:\Program Files\Dr. Guard\update.ico
c:\Program Files\Dr. Guard\virus.mp3
%Temp%\asr64_ldm.exe
Remove Dr. Guard Registry Files
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_LOCAL_MACHINE\SOFTWARE\Dr. Guard
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Dr. Guard
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Dr. Guard”
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved “{5E2121EE-0300-11D4-8D3B-444553540000}”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = “1″
Popular Search Terms
Remove Dr. Guard
Delete Dr. Guard
Uninstall Dr. Guard
How to get rid of Dr. Guard
How to remove Dr. Guard
Dr. Guard removal
Remove Dr.Guard
Dr.Guard removal
Dr-Guard
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal.
Posted under Fake Antispyware | No Comments
