Virus Guard Plus or VirusGuard Plus Removal Guide and Information

VirusGuardPlus Removal Guide and Information

Published by Mya on September 26, 2008 08:05 am under Spyware Help

Do you know what VirusGuardPlus is?

DESCRIPTION

VirusGuardPlus or Virus Guard Plus, is a fictitious anti-spyware program that is an exact copy of another fake anti-spyware program, VirtualPCGuard. Both VirtualPC Guard and VirusGuard Plus share the same devious tactics of scanning your system only to display exaggerated results as a scare method.

VirusGuard Plus comes from the same creators who spread Trojan infections such as Zlob onto computers through either the malicious websites or fake video codec downloads. VirusGuard Plus is known to be advertised on www.VirusGuardPlus.com which should never be visited by you. Once VirusGuardPlus is installed you get several popup alerts or system messages warning you of an infection. Usually these messages are fake and only part of the devilish plan to get you to purchase a full version of VirusGuard Plus.

In non-techie terms: VirusGuardPlus is not much different from other rogue anti-spyware programs in that it facilitates a scheme that results in you losing money. Do not ever purchase or install VirusGuardPlus under any circumstances.

www.virusguardplus.com website image:

Aliases: VirusGuardPlus, VirusGuard Plus, Virus Guard Plus, www.VirusGuardPlus.com

VirusGuardPlus Automatic Removal Instructions

This automatic removal method is for non-techie computer users. If you’re too lazy to learn about spyware removal or how to access sensitive files in your computer, then this is the method for you.
Before you start: Print or bookmark these instructions because you’ll have to reboot into Safe Mode. Also back up your computer in case you make a mistake.

Download and save SmitFraudFix to your desktop.
Restart your computer in Safe Mode (how to do safe mode). Once the
desktop appears, double click on the SmitfraudFix.exe on your desktop.
After the credits screen, you’ll see a menu. Select the option number 2, which is ‘Clean (safe mode recommended)’, and then
press Enter to delete infect files.
SmitFraudFix will begin cleaning your computer and take a series of cleanup processes. When the process is over, it will automatically begin the Disk Cleanup program.
Once the Disk Cleanup program is complete, you will be prompted with the message ‘Registry cleaning - Do you want to clean the registry’. Answer Y (Yes) and hit Enter. Reboot your computer.
SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there’s any) ‘Replace infected
file?’ Answer by typing Y (Yes) and hit Enter.
Reboot your computer to complete the cleaning process.
After reboot, a Notepad screen may appear containing a log of all the files
removed from your computer. If it doesn’t appear, a file will be created called
rapport.txt in the root of your drive, (Local Disk C:).
Restart your computer in Safe Mode (how to do safe mode).
Go to C:\Windows\Temp, click Edit, click Select All, press DELETE, and then
click Yes to confirm that you want all the items to go to the Recycle Bin.
Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that
you want all the items to go to the Recycle Bin.
Reboot your computer back to normal mode. Go to Windows Update and download all critical updates.

VirusGuardPlus Manual Removal Instructions

This manual removal method is for techie computer users. VirusGuardPlus manual removal may be difficult and time consuming to remove. There’s no guarantee that VirusGuardPlus will be removed completely. So read the VirusGuardPlus removal steps carefully and good luck.

Before you start: Close all programs and Internet browsers. Also back up your computer in case you make a mistake and your computer stops working.

Uninstall VirusGuardPlus Program
Click on Start > Settings > Control Panel > Double-click on Add/Remove Programs. Search for and uninstall VirusGuardPlus if found.
To stop VirusGuardPlus processes (view process removal steps)
Go to Start > Run > type taskmgr. The click the Processes tab and you’ll see a list of running processes.
Search and stop these VirusGuardPlus processes:
c:\Program Files\VirusGuardPlus\reload.exe
c:\Program Files\VirusGuardPlus\unins000.exe
c:\Program Files\Common Files\VirusGuardPlus\ugac.exe
c:\Program Files\VirusGuardPlus\Up\gup.exe
c:\Program Files\VirusGuardPlus\pgs.exe
c:\Program Files\Common Files\VirusGuardPlus\bm.exe
c:\Program Files\VirusGuardPlus\ptask.exe
c:\Program Files\VirusGuardPlus\Activate.exe
For each unwanted process, right-click on it and then select “End task”.
To Unregister VirusGuardPlus DLLs (view DLL removal steps)
Search and unregister these VirusGuardPlus DLLs:
c:\WINDOWS\system32\msvcp71.dll
c:\WINDOWS\system32\mfc71.dll
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UADAILY.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UA27602.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNMIME.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANWIN1.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNPACKS.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANKRNL.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANBCDR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANSCR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANFUNC.DLL
c:\Program Files\VirusGuardPlus\scnkrnl.dll
c:\WINDOWS\system32\msxml3a.dll
c:\WINDOWS\system32\atl71.dll
c:\Program Files\VirusGuardPlus\Tools\pblock.dll
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UA27603.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNPACK.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNACPU.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNPACKS2.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANMCR1.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANDLDR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANTOOL.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\BORLNDMM.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\unamscan.dll
c:\Program Files\VirusGuardPlus\dhlp.dll
c:\WINDOWS\system32\capicom.dll
c:\Program Files\VirusGuardPlus\Tools\sbiebho.dll
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UA27604.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UA27601.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNADBX.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNPEPACK.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANOTHR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANDOS1.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANTROJ.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANADWR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANEMUL.DLL
c:\Program Files\VirusGuardPlus\sqlite3.dll

To locate the VirusGuardPlus DLL path, go to Start > Search > All Files or Folders. Type VirusGuardPlus and in the Look in: select either My Computer or Local Hard Drives. Click the Search button.
Once you have the VirusGuardPlus DLL path, go to Start and then click on Run. In the Run command box, type cmd, and then click on OK.
To locate the exact DLL path, type cd in order to change the current directory. To display the contents of the directory, use the dir command. To remove the DLL file type regsvr32 /u FILENAME.dll (FILENAME is the name of the file that you want to unregister).

To unregister VirusGuardPlus registry keys (view registry keys removal steps)
Go to Start > Run > type regedit > press OK.
Edit the value (on the right pane) by right-clicking on it and selecting the Modify option. Select the Delete option.
Search and delete these VirusGuardPlus registry keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "UGA6P11 2.2.366.12"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ugac"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\msxml3r.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\mfc71.dll"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dhlp
HKEY_LOCAL_MACHINE\SOFTWARE\Products
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C3F6257-3E00-45C2-88D5-CB0F3A17BF0E}
HKEY_CLASSES_ROOT\TypeLib\{D761645B-6B20-4698-AEE8-729981152A82}
HKEY_CLASSES_ROOT\PopupBlocker.IEGPB.1
HKEY_CLASSES_ROOT\SBIEBHO.IEFW
HKEY_CLASSES_ROOT\CLSID\{4DD441AD-526D-4A77-9F1B-9841ED802FB0}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{3124C396-FB13-4836-A6AD-1317F1713688}\TypeLib
HKEY_CLASSES_ROOT\Interface\{3EFAA429-272F-11D2-836F-0000F87A7782}
HKEY_CLASSES_ROOT\Interface\{3EFAA428-272F-11D2-836F-0000F87A7782}
HKEY_CURRENT_USER\Software\Opera Software
VirusGuardPlus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "VirusGuardPlus"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\capicom.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\msvcp71.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\msxml3.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\ugac
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\UAVUN_is1
HKEY_CLASSES_ROOT\TypeLib\{EA7522F6-87CF-411E-8A55-19EE4344B676}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5C3F6257-3E00-45C2-88D5-CB0F3A17BF0E}
HKEY_CLASSES_ROOT\SBIEBHO.IEFW.2
HKEY_CLASSES_ROOT\CLSID\{5C3F6257-3E00-45c2-88D5-CB0F3A17BF0E}
HKEY_CLASSES_ROOT\CLSID\{3D813DFE-6C91-4A4E-8F41-04346A841D9C}\TypeLib
HKEY_CLASSES_ROOT\Interface\{C90352F7-643C-4FBC-BB23-E996EB2D51FD}
HKEY_CLASSES_ROOT\Interface\{2933BF96-7B36-11D2-B20E-00C04F983E60}
HKEY_CLASSES_ROOT\AppID\{EA7522F6-87CF-411e-8A55-19EE4344B676}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce "overinstall"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "BMN"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\msxml3a.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\atl71.dll"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\dhlp
HKEY_LOCAL_MACHINE\SOFTWARE\VirusGuardPlus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6F87F145-DC2D-4766-AF03-3A3B96FFAD98}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F87F145-DC2D-4766-AF03-3A3B96FFAD98}
HKEY_CLASSES_ROOT\PopupBlocker.IEGPB
HKEY_CLASSES_ROOT\CLSID\{6F87F145-DC2D-4766-AF03-3A3B96FFAD98}
HKEY_CLASSES_ROOT\CLSID\{3E784A01-F3AE-4DC0-9354-9526B9370EBA}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{079AA557-4A18-424A-8EEE-E39F0A8D41B9}\TypeLib
HKEY_CLASSES_ROOT\Interface\{2B8DE2FE-8D2D-11d1-B2FC-00C04FD915A9}
HKEY_CLASSES_ROOT\AppID\pblock.DLL
HKEY_CURRENT_USER\Software\VirusGuardPlus

If your homepage has been changed, go to Start > Control Panel > Internet Options > click on the General > click Use Default under Home Page. Add the your desired default homepage, then click Apply > click OK. Open a new web browser to check that you have your desired default homepage.
Remove VirusGuardPlus Directories.
To find VirusGuardPlus directories, go to Start > My Computer > Local Disk (C:) > Program Files > Show the contents of this folder.

Search and delete the following VirusGuardPlus directories:
%ProgramFiles%\VirusGuardPlus
%AllUsersProfile%\Start Menu\Programs\VirusGuardPlus
%SystemDrive%\VirusGuardPlus
%AppData%\VirusGuardPlus
%CommonProgramFiles%\VirusGuardPlus

Right-click on the VirusGuardPlus folder and select Delete.

A message will appear saying ‘Are you sure you want to remove the folder VirusGuardPlus and move all its contents to the Recycle Bin?’, click Yes.
Another message will appear saying ‘Renaming, moving or deleting VirusGuardPlus could make some programs not work. Are you sure you want to do this?’, click Yes.
To remove VirusGuardPlus icons on your Desktop, drag and drop them to the Recycle Bin.

You’ve completed the VirusGuardPlus manual removal instructions!
I hope this article has helped you solve your VirusGuardPlus problems. If you want to contribute to this article, post your comment below.

Disclaimer: This article is for educational purposes. By using this information you agree to be bound by the disclaimer. There’s no guarantee that VirusGuardPlus will be completely removed from your computer. Seek professional help if your computer continues to experience problems.

Share and Enjoy: These icons link to social bookmarking sites where readers can share and discover new web pages.