Spyware Database
Uninstall VirtualGuardPlus
VirtualGuardPlus Description and Removal Instructions
VirtualGuardPlus, also known as Virtual Guard Plus, is a rogue anti-spyware program and clone of VirtualPCGuard. VirtualGuardPlus may have installed in your computer system with the help of Trojan Zlob. Once Zlob is installed, it will generate fake popups and fake system warning messages "informing" you about supposed spyware infections. In reality, the only malicious infection you're most likely to have is VirtualGuardPlus itself. VirtualGuardPlus displays these rogue messages to make you believe you're infected with spyware and then offer you VirtualGuardPlus's licensed program to remove the imaginary infections.
VirtualGuardPlus is also able to emulate a fake system scan and generate a list of spyware infections as a result. Do not be scared, these spyware infections found on your system are only meant to scare you and push you into purchasing rogue VirtualGuardPlus's licensed program. All links provided by VirtualGuardPlus will probably redirect you to VirtualGuardPlus's website or other rogue websites that promote VirtualGuardPlus as a real spyware remover. It is advised that you get rid of VirtualGuardPlus without hesitation. VirtualGuardPlus is a scam created to steal $49.95-79.95 from gullible users.
IMPORTANT DISCLAIMER
Please note: This website is NOT associated or affiliated in any way
with VirtualGuardPlus or its creators. The content provided in this article should NOT be construed as an endorsement, a recommendation or an advertisement for VirtualGuardPlus.
The goal of this article is to assist computer users on the detection and removal of VirtualGuardPlus. This article is provided on an "as is" basis and to be used for informational purposes only. |
Why Should I Remove VirtualGuardPlus?
Note: Manual removal is a difficult process and it is not recommend
unless you are an expert in this field. Therefore, your best defense is to
download and install a reliable anti-spyware program to scan VirtualGuardPlus and other spyware on your machine.
In order to detect VirtualGuardPlus in the easiest and fastest way possible, we advised trying the free SpyHunter scanner provided on this website.
The free version of SpyHunter is only a detection utility.
However, if you wish to continue to the VirtualGuardPlus removal stage with SpyHunter, you must first purchase the full version of SpyHunter or you
can manually remove VirtualGuardPlus by moving on to the "Remove VirtualGuardPlus Manually" section.
Online threats constantly change to avoid detection, and therefore SpyHunter comes equipped with a full technical support, as well as a
one-on-one customer support service called Spyware HelpDesk which gives its support technicians the ability to create a custom automated
fix tailored to your PC. If SpyHunter is unable to detect and remove VirtualGuardPlus, the Spyware Helpdesk will generate a custom fix, transmit
it to your SpyHunter removal tool and completely remove VirtualGuardPlus from your PC.
Download SpyHunter Scanner.
- Run a full system scan to detect VirtualGuardPlus files.
- Once you've detected VirtualGuardPlus on your PC, you will then need to purchase SpyHunter to start the removal process.
- Reboot your PC and rerun the scan for any remaining traces of VirtualGuardPlus.
** SpyHunter scanner version is ONLY for detection. To remove VirtualGuardPlus
and other threats, you will need to purchase SpyHunter's removal tool.
Remove VirtualGuardPlus Manually
Tip:
If you are not an expert in this field, we highly
recommend you use SpyHunter to scan your PC for VirtualGuardPlus. You'll run
the risk of damaging your computer if you make a mistake
during the manual removal process.
Stop the following VirtualGuardPlus processes:
c:\Program Files\Common Files\VirusGuardPlus\bm.exe
c:\Program Files\Common Files\VirusGuardPlus\ugac.exe
c:\Program Files\VirusGuardPlus\Activate.exe
c:\Program Files\VirusGuardPlus\unins000.exe
c:\Program Files\VirusGuardPlus\pgs.exe
c:\Program Files\VirusGuardPlus\ptask.exe
c:\Program Files\VirusGuardPlus\reload.exe
c:\Program Files\VirusGuardPlus\Up\gup.exe
Remove the following
VirtualGuardPlus registry keys:
HKEY_CURRENT_USER\Software\Opera Software
HKEY_CURRENT_USER\Software\VirusGuardPlus
HKEY_CLASSES_ROOT\AppID\{EA7522F6-87CF-411e-8A55-19EE4344B676}
HKEY_CLASSES_ROOT\AppID\pblock.DLL
HKEY_CLASSES_ROOT\Interface\{C90352F7-643C-4FBC-BB23-E996EB2D51FD}
HKEY_CLASSES_ROOT\Interface\{2933BF96-7B36-11D2-B20E-00C04F983E60}
HKEY_CLASSES_ROOT\Interface\{2B8DE2FE-8D2D-11d1-B2FC-00C04FD915A9}
HKEY_CLASSES_ROOT\Interface\{3EFAA428-272F-11D2-836F-0000F87A7782}
HKEY_CLASSES_ROOT\Interface\{3EFAA429-272F-11D2-836F-0000F87A7782}
HKEY_CLASSES_ROOT\PopupBlocker.IEGPB
HKEY_CLASSES_ROOT\PopupBlocker.IEGPB.1
HKEY_CLASSES_ROOT\SBIEBHO.IEFW
HKEY_CLASSES_ROOT\SBIEBHO.IEFW.2
HKEY_CLASSES_ROOT\CLSID\{3124C396-FB13-4836-A6AD-1317F1713688}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{3D813DFE-6C91-4A4E-8F41-04346A841D9C}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{079AA557-4A18-424A-8EEE-E39F0A8D41B9}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{4DD441AD-526D-4A77-9F1B-9841ED802FB0}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{3E784A01-F3AE-4DC0-9354-9526B9370EBA}\TypeLib
HKEY_CLASSES_ROOT\CLSID\{5C3F6257-3E00-45c2-88D5-CB0F3A17BF0E}
HKEY_CLASSES_ROOT\CLSID\{6F87F145-DC2D-4766-AF03-3A3B96FFAD98}
HKEY_LOCAL_MACHINE\SOFTWARE\VirusGuardPlus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "UGA6P11 2.2.366.12"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "BMN"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ugac"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "VirusGuardPlus"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce "overinstall"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\msxml3.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\msxml3a.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\msxml3r.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\atl71.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\capicom.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\mfc71.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls "C:\WINDOWS\system32\msvcp71.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C3F6257-3E00-45C2-88D5-CB0F3A17BF0E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6F87F145-DC2D-4766-AF03-3A3B96FFAD98}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\UAVUN_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Products
HKEY_LOCAL_MACHINE\SOFTWARE\ugac
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\dhlp
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dhlp
HKEY_CLASSES_ROOT\TypeLib\{D761645B-6B20-4698-AEE8-729981152A82}
HKEY_CLASSES_ROOT\TypeLib\{EA7522F6-87CF-411E-8A55-19EE4344B676}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5C3F6257-3E00-45C2-88D5-CB0F3A17BF0E}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F87F145-DC2D-4766-AF03-3A3B96FFAD98}
Unregister the following VirtualGuardPlus DLL files:
c:\Program Files\VirusGuardPlus\sqlite3.dll
c:\Program Files\VirusGuardPlus\dhlp.dll
c:\Program Files\VirusGuardPlus\scnkrnl.dll
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANWIN1.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNACPU.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNADBX.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\BORLNDMM.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANADWR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANFUNC.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANKRNL.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANMCR1.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANOTHR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANBCDR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANDLDR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANDOS1.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANEMUL.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANSCR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANTOOL.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANTROJ.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\unamscan.dll
c:\Program Files\VirusGuardPlus\Engines\plugins\UNMIME.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNPACK.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNPACKS.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UA27603.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UA27604.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UADAILY.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNPACKS2.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNPEPACK.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UA27601.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UA27602.DLL
c:\Program Files\VirusGuardPlus\Tools\pblock.dll
c:\Program Files\VirusGuardPlus\Tools\sbiebho.dll
c:\WINDOWS\system32\atl71.dll
c:\WINDOWS\system32\capicom.dll
c:\WINDOWS\system32\mfc71.dll
c:\WINDOWS\system32\msvcp71.dll
c:\WINDOWS\system32\msxml3a.dll
Locate and delete the following VirtualGuardPlus
files:
%UserProfile%\Application Data\VirusGuardPlus
%UserProfile%\Application Data\VirusGuardPlus\Logs
%UserProfile%\Application Data\VirusGuardPlus\Logs\threats.log
d:\VirusGuardPlus
d:\VirusGuardPlus\AVQuar
c:\VirusGuardPlus
c:\VirusGuardPlus\AVQuar
c:\Program Files\VirusGuardPlus
c:\Program Files\Common Files\VirusGuardPlus\bm.exe
c:\Program Files\Common Files\VirusGuardPlus
c:\Program Files\Common Files\VirusGuardPlus\ugac.exe
c:\Program Files\VirusGuardPlus\Activate.exe
c:\Program Files\VirusGuardPlus\settings.ini
c:\Program Files\VirusGuardPlus\sqlite3.dll
c:\Program Files\VirusGuardPlus\unins000.dat
c:\Program Files\VirusGuardPlus\unins000.exe
c:\Program Files\VirusGuardPlus\al.dat
c:\Program Files\VirusGuardPlus\dhlp.dll
c:\Program Files\VirusGuardPlus\FWSettings.bin
c:\Program Files\VirusGuardPlus\history.db
c:\Program Files\VirusGuardPlus\main.log
c:\Program Files\VirusGuardPlus\pgs.exe
c:\Program Files\VirusGuardPlus\ptask.exe
c:\Program Files\VirusGuardPlus\reload.exe
c:\Program Files\VirusGuardPlus\ResErrors.log
c:\Program Files\VirusGuardPlus\scnkrnl.dll
c:\Program Files\VirusGuardPlus\Config
c:\Program Files\VirusGuardPlus\Config\pgs.xml
c:\Program Files\VirusGuardPlus\Dat
c:\Program Files\VirusGuardPlus\Dat\Activate.dat
c:\Program Files\VirusGuardPlus\Dat\cd.dat
c:\Program Files\VirusGuardPlus\Dat\incmp.dat
c:\Program Files\VirusGuardPlus\Dat\index.dat
c:\Program Files\VirusGuardPlus\Dat\pv.dat
c:\Program Files\VirusGuardPlus\Dat\BkSites.dat
c:\Program Files\VirusGuardPlus\Dat\bnlink.dat
c:\Program Files\VirusGuardPlus\Graphics
c:\Program Files\VirusGuardPlus\Graphics\cross.gif
c:\Program Files\VirusGuardPlus\Graphics\ga6p.gif
c:\Program Files\VirusGuardPlus\Graphics\support.ico
c:\Program Files\VirusGuardPlus\Graphics\Support.url
c:\Program Files\VirusGuardPlus\Graphics\uninstall.ico
c:\Program Files\VirusGuardPlus\Graphics\kb.url
c:\Program Files\VirusGuardPlus\Graphics\main.ico
c:\Program Files\VirusGuardPlus\Graphics\mini.ico
c:\Program Files\VirusGuardPlus\Graphics\Online.url
c:\Program Files\VirusGuardPlus\Engines
c:\Program Files\VirusGuardPlus\Engines\PGBase\vbpv.dat
c:\Program Files\VirusGuardPlus\Engines\PGBase
c:\Program Files\VirusGuardPlus\Engines\plugins
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANWIN1.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNACPU.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNADBX.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\BORLNDMM.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANADWR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANFUNC.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANKRNL.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANMCR1.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANOTHR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANBCDR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANDLDR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANDOS1.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANEMUL.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANSCR.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANTOOL.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\SCANTROJ.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\unamscan.dll
c:\Program Files\VirusGuardPlus\Engines\plugins\UNMIME.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNPACK.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNPACKS.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UA27603.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UA27604.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UADAILY.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNPACKS2.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UNPEPACK.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\vbpv.dat
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UA27601.DLL
c:\Program Files\VirusGuardPlus\Engines\plugins\UpDate\UA27602.DLL
c:\Program Files\VirusGuardPlus\Engines\AWBase
c:\Program Files\VirusGuardPlus\Engines\AWBase\vbpv.dat
c:\Program Files\VirusGuardPlus\Engines\AWBase\database
c:\Program Files\VirusGuardPlus\Engines\AWBase\database\enemies.dat
c:\Program Files\VirusGuardPlus\LA
c:\Program Files\VirusGuardPlus\LA\lapv.dat
c:\Program Files\VirusGuardPlus\LA\License.rtf
c:\Program Files\VirusGuardPlus\Up\PGupdater.dat
c:\Program Files\VirusGuardPlus\Up\UBupdater.dat
c:\Program Files\VirusGuardPlus\Up\up.dat
c:\Program Files\VirusGuardPlus\Up\updater.dat
c:\Program Files\VirusGuardPlus\Tools
c:\Program Files\VirusGuardPlus\Tools\pblock.dll
c:\Program Files\VirusGuardPlus\Tools\sbiebho.dll
c:\Program Files\VirusGuardPlus\Up
c:\Program Files\VirusGuardPlus\Up\ASupdater.dat
c:\Program Files\VirusGuardPlus\Up\gup.exe
c:\WINDOWS\system32\atl71.dll
c:\WINDOWS\system32\capicom.dll
c:\WINDOWS\system32\mfc71.dll
c:\WINDOWS\system32\msvcp71.dll
c:\WINDOWS\system32\msxml3a.dll
c:\WINDOWS\system32\drivers\dhlp.sys
c:\Documents and Settings\All Users\Application Data\SalesMon
c:\Documents and Settings\All Users\Application Data\SalesMon\Data
c:\Documents and Settings\All Users\Desktop\VirusGuardPlus.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\VirusGuardPlus
c:\Documents and Settings\All Users\Start Menu\Programs\VirusGuardPlus\VirusGuardPlus.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\VirusGuardPlus\Contact Customer Support.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\VirusGuardPlus\Uninstall VirusGuardPlus.lnk
VirtualGuardPlus Advice
VirtualGuardPlus manual removal process can be difficult to do because you're required to access and edit
sensitive files in your system registry.
Warning: If you try to remove VirtualGuardPlus files without being completely
sure what you are doing, you run the risk of damaging or losing important data on your computer.
Tip: To avoid this risk, we highly recommend you use a good spyware cleaner/remover to
automatically find and remove VirtualGuardPlus as well as spyware,
adware, trojan and malware in your PC.
VirtualGuardPlus Automatic Detection
To automatically search for VirtualGuardPlus...
Download SpyHunter Scanner.
** SpyHunter scanner version is ONLY for detection. To remove VirtualGuardPlus
and other threats, you will need to purchase SpyHunter's removal tool.
For more details on VirtualGuardPlus, please read our "VirtualGuardPlus Overview" below.
VirtualGuardPlus Overview
In the following sections, we investigate and explain the key malicious properties that are attributed to VirtualGuardPlus.
How VirtualGuardPlus infects your PC
VirtualGuardPlus may use one or more of these methods to infect your computer. VirtualGuardPlus is spyware that may take
control of your entire system. VirtualGuardPlus may infect your computer...
- Through unexpected email attachments. One of the most popular ways of becoming infected with spyware is by opening an attachment
sent via e-mail. You should never open unexpected email attachments. Confirm with the sender first that they did in fact send the
email.
- Through browser security loopholes while you're surfing the Web. Some spyware can even bypass firewalls by disguising itself as
part of legitimate software.
- Through instant messenger programs. If you're not secured by a good firewall, spyware can attach itself when you're
sharing files with your instant messenger.
- VirtualGuardPlus recreates, repairs and updates itself. VirtualGuardPlus and other complex spyware
applications may recreate, repair and update themselves to evade deletion. When VirtualGuardPlus alters, restores and updates
its files, DLLs, registry keys and process, a scanner may only remove part of the program allowing the other
remaining files to execute procedures to repair and update. In these cases, it can make the VirtualGuardPlus manual removal
process very difficult.
VirtualGuardPlus Prevention Rules
Follow these VirtualGuardPlus prevention rules and protect your computer from VirtualGuardPlus and other spyware:
Rule #1: Ensure that your Windows Security is up-to-date.
Every week Microsoft provides their new updates that can always be downloaded manually from the Microsoft website. To get
Microsoft Update, you should do the following steps:
- Go to IE > Tools > Windows Update > Product Updates,
- Select "ALL High-Priority Security Updates" from the list,
- Open IE and go to Internet Options > Security > Internet,
- Press "Default Level" and then OK,
- Press "Custom Level."
Rule #2: Download and install a reliable anti-spyware software.
A good anti-spyware software that recognizes current VirtualGuardPlus as well as other forms of spyware
can be the answer to all your security issues. Listed below is an anti-spyware program that can effectively
reverse the damage of your computer and detect VirtualGuardPlus automatically.
Download SpyHunter Scanner.
** SpyHunter scanner version is ONLY for spyware detection. To remove VirtualGuardPlus
and other online threats, you will need to purchase SpyHunter's removal tool.
Rule #3: Keep your anti-spyware definitions up-to-date.
New VirtualGuardPlus files can be created every day, thus it is very important to ensure that your
anti-spyware program is up-to-date. Your anti-spyware scanner should have an update feature where with a click
of a button so you can get new spyware definitions immediately. Often, good anti-spyware software will open
an update window reminding you that there are new updates available.
Rule #4: Install and keep your firewall turned on.
A firewall is vital for a complete protection of your PC. Ensure that your firewall is always turned on.
A firewall can stop unwanted software like VirtualGuardPlus from hijacking your PC.
VirtualGuardPlus and other Spyware Related Info:
Wikipedia.org/Spyware - Wikipedia's definition of spyware.
StopBadware.org - A non-profit organization that aims to fight against badware.
Anti-Spyware Coalition - Is a group dedicated to building a consensus about definitions and best
practices in the debate surrounding spyware and other potentially unwanted technologies.
|