How to remove XP Guard

Home » Rogue Anti-Spyware » XP Guard Repair and protect your computer easily. Download XP Guard removal tool

XP Guard description

XP Guard is a fake anti-spyware application which enters the system with the help of trojan. Trojan based software starts its activities as soon as it is installed to user’s computer. Malware downloads and installs itself automatically without user’s knowledge and consent. It is designed to pilfer money from unwary users.

Once active XP Guard starts to scan your computer ad displays numerous security alerts that state about computer infections. Here are few examples of fake warning messages:

Tracking software found!
Your PC activity is being monitored. Possible spyware
infection. Your data security may be compromised. Sensitive
data can be stolen. Prevent damage now by completing a
security scan.

Stealth intrusion!
Infection detected in the background. Your computer is now
attacked by spyware and rogue software. Eliminate the
infection safety, perform a security scan and deletion now.

System hijack!
System security threat was detected. Viruses and/or spyware
may be damaging your system now. Prevent infection and
data loss or stealing by running a free security scan.

XP Guard ALERT
Internet Explorer alert. Visiting this site may pose a security threat to your system.

The parasite wants to trick user into thinking their computer is severely compromised and that’s why you supposedly need to buy its registered version and purchase it. This is a scam and none of information should be trusted. It may also redirect your browser to counterfeit websites that advertise program. This is a fraud. Avoid buying anything it offers but use decent anti-spyware application and remove XP Guard immediately.

How to get rid of XP Guard

This infection can be removed using Spyware Doctor.

Download does not start? Try a mirror download here
Spyware Doctor is widely valued as one of the best AntiSpyware programs available to protect you from XP Guard and the latest internet security threats. If your computer is infected with XP Guard we strongly recommend automatic spyware scanner.

How to manually remove XP Guard

To get rid of spyware such as XP Guard you need to remove processes, search and delete registry keys, DLL and other XP Guard related files from your computer.

Take Note: The manual process of removing spyware from your computer is difficult and puts you at risk of damaging your computer. We advise using our automatic XP Guard remover.

1. Uninstall XP Guard from Control Panel
   Start > Settings > Control Panel > Add/Remove Programs. Double click to uninstall.
2. End these XP Guard processes:
   MSASCui.exe
   pw.exe
   To stop processes press Ctrl + Alt + Del or click Start > Run > type "taskmgr". Select malicious process in the list and click "End Process" button.
3. Delete XP Guard registry entries: HKEY_CURRENT_USER\Software\Classes\pezfile
   HKEY_CLASSES_ROOT\pezfile
   HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
   HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
   HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
   HKEY_CLASSES_ROOT\pezfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
   HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
   HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
   HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
   To open registry editor click Start > Run > type "regedit".
   Warning! Manual registry entries editing may cause damage to your system.
   Download Uniblue RegistryBooster 2010 to scan for registry errors.
4. Search and delete these XP Guard related files:
   %UserProfile%\Local Settings\Application Data\opRSK
   %UserProfile%\Local Settings\Application Data\pw.exe
   %UserProfile%\Local Settings\Application Data\MSASCui.exe
   %UserProfile%\AppData\Local\opRSK
   %UserProfile%\AppData\Local\pw.exe
   %UserProfile%\AppData\Local\MSASCui.exe