Saturday, October 15, 2011

Remove Guardian OnlineRemove Guardian Online

Remove Guardian Online
Guardian Online is a fake antivirus program which intend to urge the user whose computer is infected by Guardian Online to purchase the full version of Guardian Online. Guardian Online produces fake alert in order to cheat the user. Guardian Online installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Guardian Online will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Guardian Online to remove all the malwares.

Guardian Online can be removed by stopping its processes [random].exe and Guardian Online.exe and the user should remember to kill the file. The registry settings should be restored by following the removal guide below.

Guardian Online provide fake features such as System Scan, System Status, Privacy, Firewall etc. None of them can protect the computer from malwares. It scares the user with fake error message such as Your Security Status is at risk.

Guardian Online should be removed immediately!

Guardian Online Removal Guide
Kill Process
(How to kill a process effectively?)

Delete Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"

Remove Folders and Files
%UserProfile%\Application Data\Microsoft\[random].exe
%UserProfile%\Application Data\[random].exe
%StartMenu%\Programs\Guardian Online
%UserProfile%\Desktop\Guardian Online.lnkFile Location Notes:

%System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP/Vista/7.

%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\[Current User] for Windows 2000/XP, C:\Users\[Current User] for Windows Vista/7, and c:\winnt\profiles\[Current User] for Windows NT.

%AppData% refers to the current users Application Data folder. By default, this is C:\Documents and Settings\[Current User]\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\[Current User]\AppData\Roaming.

%StartMenu% refers to the Windows Start Menu. For Windows 95/98/ME it refers to C:\windows\start menu\, for Windows XP, Vista, NT, 2000 and 2003 it refers to C:\Documents and Settings\[Current User]\Start Menu\, and for Windows Vista/7 it is C:\Users\[Current User]\AppData\Roaming\Microsoft\Windows\Start Menu.

No comments:

Post a Comment