Home Malware Programs Adware Win Guard Ads

Win Guard Ads

Posted: September 11, 2014

Threat Metric

Threat Level: 2/10
Infected PCs: 4,731
First Seen: September 1, 2014
Last Seen: August 21, 2024
OS(es) Affected: Windows


Win Guard Ads is a questionable program that may prove to be annoying due to it loading several random ads on a system when surfing the internet. In such a case the Win Guard Ads are apt to loading as pop-ups or banners where they try to offer various deals or products through the internet. Use of those Win Guard Ads may cause redirects to other sites or pages that have questionable content or material that is proven to be unwanted by many computer users. Stopping the Win Guard Ads from displaying at random could require finding all plugins or add-on components related to Win Guard Ads. These add-ons may also be found with some web browser applications.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files (x86)\WinGuard\winguard.dll File name: winguard.dll
Size: 196.09 KB (196096 bytes)
MD5: b5f2d4ce5ed064bf131f28e4e5c9fad5
Detection count: 4,204
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files (x86)\WinGuard\winguard.dll
Group: Malware file
Last Updated: January 3, 2023

Registry Modifications

The following newly produced Registry Values are:

CLSID{e4bf64e4-237e-48e7-b43b-da6e1b60d81a}File name without pathhttp_win1guard.net_0.localstoragehttp_win1guard.net_0.localstorage-journalhttps_win1guard.net_0.localstoragehttps_win1guard.net_0.localstorage-journalRegexp file mask%PROGRAMFILES%\WinGuard\winguard.crx%PROGRAMFILES%\WinGuard\winguard.xpi%PROGRAMFILES(x86)%\WinGuard\winguard.crx%PROGRAMFILES(x86)%\WinGuard\winguard.xpiHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{E4BF64E4-237E-48E7-B43B-DA6E1B60D81A}Software\Microsoft\Internet Explorer\DOMStorage\win1guard.netSOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e4bf64e4-237e-48e7-b43b-da6e1b60d81a}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E4BF64E4-237E-48E7-B43B-DA6E1B60D81A}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E4BF64E4-237E-48E7-B43B-DA6E1B60D81A}SOFTWARE\Mozilla\Firefox\Extensions\{b5c5f665-7989-464f-8ec3-30b9885084df}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{e4bf64e4-237e-48e7-b43b-da6e1b60d81a}SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\{b5c5f665-7989-464f-8ec3-30b9885084df}
Loading...