Windows Premium Guard

Windows Premium Guard Description

Windows Premium Guard is promoted and sold as an anti-virus product, but SpywareRemove.com malware research team has confirmed that Windows Premium Guard’s true functions are those of a rogue anti-virus program, including inaccurate pop-up warnings, system scans with fraudulent results and various types of security-hindering behavior. While Windows Premium Guard will repeatedly encourage you to spend money on its registration key, purchasing Windows Premium Guard will only place your money and financial information in criminal possession, and you should always ignore Windows Premium Guard’s prompts in favor of removing Windows Premium Guard with a legitimate anti-malware application. Because Windows Premium Guard may block your real security programs while Windows Premium Guard is open, you may also be required to boot your operating system in a way that bypasses Windows Premium Guard’s startup routine before you can delete Windows Premium Guard – for example, by using Safe Mode or other baseline security features to assist your anti-malware software.

Windows Premium Guard: Closer to a Virtual Thief Than a Protector

Windows Premium Guard belongs to the same group of scamware (identified as FakeVimes by Microsoft) as dozens of other rogue anti-virus scanners, including both recently-emerged PC threats and older ones like Windows Enterprise Defender, Windows Safety Manager, CleanUp Antivirus, Total Anti Malware Protection, Windows Ultimate Safeguard, Volcano Security Suite, Windows Turnkey Console, Windows Crucial Scanner, Smart Anti-Malware Protection, Windows High-End Protection, Windows Home Patron, Windows Performance Adviser, Windows Advanced Security Center, Anti-Malware Lab, Windows Safety Maintenance, Windows Guard Tools, Windows Protection Master, Security Master AV, PrivacyGuard PRO, PC Live Guard, Smart Engine, Windows Antivirus Care, Windows Daily Adviser, Windows Maintenance Suite, Windows Antihazard Solution, Windows Defending Center, Windows Enterprise Suite, Virus Doctor, Windows Sleek Performance, Windows Interactive Safety, Extra Antivirus, Windows No-Risk Agent, Windows PC Aid, Windows Web Commander, Home Safety Essentials, Windows Pro Web Helper, Windows Web Combat, Security Antivirus, My Security Shield, Windows Trouble Taker, Windows Warding System, Windows Process Director, Windows Secure Surfer, Windows Secure Workshop, Windows Internet Booster, My Security Engine, Home Malware Cleaner, Windows Antivirus Patch, Windows Defence Counsel, Windows Personal Doctor, Windows Risk Minimizer, Best Antivirus Software, Windows Safety Toolkit, Windows Pro Defence, Windows Guardian Angel, Antivirus Smart Protection, Windows Protection Unit, Windows Smart Partner, Windows Pro Safety, Windows Advanced Toolkit, Windows Profound Security, Windows Performance Catalyst, Windows Proactive Safety, Smart Internet Protection 2012, Windows Antivirus Release, Windows Basic Antivirus, Enterprise Suite, Additional Guard, Windows Shielding Utility, Windows Control Series, Windows Safety Wizard, Windows Privacy Counsel, Windows Custodian Utility, Windows Pro Solutions, Windows Security Renewal, Windows Functionality Checker, Fast Antivirus 2009, Windows Safety Series, Live Enterprise Suite, Personal Internet Security 2011, Windows Problems Stopper, Windows Active Guard, Windows Care Taker, Windows Ultimate Security Patch, Windows Safety Checkpoint, Windows Expert Series, Windows PRO Scanner, Windows Virtual Firewall, Windows Software Keeper, Windows Protection Maintenance, Smart Security, Windows Security System, Windows Security Suite, Windows Pro Rescuer, Windows Custom Safety, Windows Telemetry Center, Windows Tools Patch, Windows Abnormality Checker, Smart Virus Eliminator, Windows Safety Module, Windows ProSecurity Scanner, Windows Smart Warden, Windows Private Shield, Windows Antivirus Rampart, Windows Antivirus Machine, Windows Virtual Security, VirusSecurity, Windows AntiHazard Helper, System Protection Tools, Windows Multi Control System, Activate Ultimate Protection, Windows Malware Sleuth, XP Smart Security, Windows First-Class Protector, Windows Privacy Module, Windows Proprietary Advisor, Windows Interactive Security, Windows Premium Defender, Personal Security Sentinel, Windows Managing System, Windows Debug Center, Windows No-Risk Center, Windows Privacy Extension, Keep Center Keeper, Windows Safeguard Upgrade, Windows Health Keeper, Windows Secure Web Patch, Windows Premium Console, Windows Virtual Angel, Live PC Care, Internet Security Essentials, Windows Advanced User Patch, Windows Virus Hunter, Strong Malware Defender, Windows Pro Safety Release, Windows Maintenance Guard, Windows Anti-Malware Patch, Windows Shield Tool, Windows Active Defender, Windows Firewall Constructor, Windows Be-on-Guard Edition, Windows Custom Management, Windows Threats Destroyer, Internet Security Suite, Windows Software Saver, Windows Stability Guard, Windows AntiHazard Center, Windows Activity Debugger, Windows Efficiency Accelerator, Smart Internet Protection 2011, Windows Guard Solutions, Windows System Defender, Windows ProSecure Scanner, Windows Instant Scanner, My Security Wall, Windows Secure Workstation and Best Malware Protection. SpywareRemove.com malware researchers stress that, despite their different brand names, each of these fake AV products uses similar attacks against your PC, particularly including fake pop-up alerts and system scans, and all of them should be considered just as hostile as Windows Premium Guard itself.

Pop-ups and other forms of security information from Windows Premium Guard should always be discarded as fraudulent and even potentially destructive to your PC if their advice is followed. SpywareRemove.com malware experts note that these fake alerts can include warnings about non-existent viruses, fake program activity warnings, threats about attacks that aren’t occurring or various forms of ‘software at risk’ messages that encourage you to purchase Windows Premium Guard. Ultimately, despite the strong recommendations of these pop-ups, there’s no reason to buy Windows Premium Guard, although you may wish to activate its registration process for free with the code ’0W000-000B0-00T00-E0020′ (which can reduce some of Windows Premium Guard’s attacks against your PC).

Why Taking Out Windows Premium Guard’s Fake Guardsmanship Should Be a High Priority

Unlike real anti-virus software, Windows Premium Guard will also launch itself with Windows and eschews giving you any way to disable this startup routine by normal methods. This can be problematic when attempting to remove Windows Premium Guard, since SpywareRemove.com malware researchers have found that scamware from Windows Premium Guard’s family can also create security issues such as:

• Blocking security and anti-malware programs, including Windows tools like Task Manager.
• Redirecting your web browser to hostile websites when you attempt to use an online search engine.
• Disabling warning messages for file downloads with invalid signature identification (a method of distinguishing between legitimate programs and malicious ones).
• Disabling the Windows UAC, which prevents unauthorized changes to your PC.

Because these conditions work to make your computer much more vulnerable to other PC threats than it would be under ordinary circumstances, SpywareRemove.com malware research team suggests Windows Premium Guard’s immediate deletion with anti-malware software once you notice any symptoms of a Windows Premium Guard infection. To disable Windows Premium Guard and access the appropriate software to expedite its removal, Safe Mode, a remote hard drive-based boot or booting into a second OS (especially a non-Windows OS, as Windows Premium Guard is, like all FakeVimes-based scamware, Windows-specific) are all useful.

Windows Premium Guard Automatic Detection Tool (Recommended)

Visual & GUI Characteristics

Technical Details

Registry Modifications

• The following newly produced Registry Values are:
  HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-4-25_4"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "uqcphfxlsq"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\ASProtectHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashSimp2.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bargains.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fp-win_trial.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\monitor.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oaui.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rcsync.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\system32.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wininetd.exe

Additional Information

• The following messages's were detected:
  

  #	Message
  1	Error Attempt to modify Registry key entries detected. Registry entry analysis recommended.
  2	Warning Firewall has blocked a program from accessing the Internet C:\program files\internet explorer\iexplore.exe is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
  3	Warning! Spambot detected! Attention! A spambot sending viruses from your e-mail has been detected on your PC.
  4	Error Attempt to modify Registry key entries detected. Registry entry analysis recommended.
  5	Error Keylogger activity detected. System information security is at risk. It is recommended to activate protection and run a full system scan.
  6	Error Software without a digital signature detected. Your system files are at risk. We strongly advise you to activate your protection.
  7	Warning Firewall has blocked a program from accessing the Internet C:program filesinternet exploreriexplore.exe is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
  8	Warning! Identity theft attempt Detected
  9	Warning! Spambot detected! Attention! A spambot sending viruses from your e-mail has been detected on your PC.

Home Malware ProgramsRogue Anti-Spyware Programs Windows Premium Guard