Windows Warding Module

Someone is seems to be having fun, as there is yet another new rogue from the Rogue.VirusDoctor or Rogue.FakeVimes family coming our way. The fake antivirus programs family classification depends on a security researcher, but you can be sure that Windows Warding Module is something you do not want to have anything to do with. This new fake antivirus application simply follows the path of its predecessors, and unless you remove it from your computer, it may cause quite a lot of harm and nuisance. It just proves how important your computer security is, and that you need to make sure your system is absolutely safe.

As one can definitely tell from its interface, Windows Warding Module is a direct clone of Windows Active HotSpot, Windows Cleaning Toolkit, Windows Expert Console and all the other similar infections. There are many ways for Windows Warding Module to enter your computer, but if you are infected with this rogue, chances are you have other threats installed on your computer as well. That is so, because Windows Warding Module is usually installed by a downloader, related to fake online malware scanners. That means that you have to be careful when you browse the internet, and if you encounter a web page or a flash advertisement that offers you to run a full system scan, you should know better than to click it.

However, if you get Windows Warding Module installed on your computer, you will notice this infection at once. Rogue antispyware applications do not work in stealth like Trojans or worms. This program jumps into action immediately, once you boot your computer and it performs a fake system scan, which is devised in order to convince you that you must purchase the full version of Windows Warding Module. Basically, the infection tries to make you think that your computer is heavily infected with such malware as Trojan.MSIL.Agent, Email-Worm, FraudTool and so on. Windows Warding Module makes it seem as though all these non-existent threats are responsible for the erratic system behavior.

The truth is though that Windows Warding Module is the one causing system errors. Even the fake security notifications generated by the rogue to strengthen the impression that you are infected are absolutely fake:

Recommended: Activate Antivirus to get full protection against malicious, virus, spyware and unwanted software
Trial version
Please purchase the full version of the software to ensure the ultimate protection

Needless to say, that you must not click anything in order to purchase Windows Warding Module. Money is the main objective of this infection and the entire scam. If you go to Windows Warding Module’s purchase form, you will see a “lifetime offer” for $99.9, but that is a total hoax, designed to push you into giving away your credit card information. Since you have to avoid cyber theft, you must close the purchase page and remove Windows Warding Module immediately.

However, Windows Warding Module will try its best to avoid being removed from your computer. The rogue will block Task Manager, Registry Editor and even Windows Explorer in attempt to remain in your system for as long as possible. To remove Windows Warding Module for good, follow the instructions below and then invest in a powerful antimalware tool that will help you delete Windows Warding Module and other related threats automatically.

Remove Windows Warding Module

1. Restart your computer and press F8 several times for Advanced Boot Options menu to open.
2. Use arrow keys to navigate and select Safe Mode with Command Prompt. Press Enter.
3. When system loads, type cd.. next to C:\Windows\system32 and hit Enter.
4. Another line will appear. Type \explorer.exe right after C:\Windows and press Enter.
5. When Windows Explorer loads, open Start menu.
6. Enter %appdata% into the search box and hit Enter. For Windows XP, go to Start menu, launch Run, enter %appdata% and click OK.
7. When directory opens, delete the file “guard-{4 random symbols}.exe”.
8. Restart your computer in Normal mode.
9. Go to Start menu and enter regedit into the search box, press Enter. For Windows XP, open Start menu, click Run, enter regedit and click OK.
10. Go to HKEY_CURRENT_USER\Software\Microsoft\Windows NT\Current Version\Winlogon.
11. Right-click Shell on the right pane and select Modify.
12. Change Value data by typing %WinDir%\Explorer.exe. Click OK.
13. Close Registry Editor, access http://www.pcthreat.com/download-sph and download SpyHunter.
14. Install the program and scan your computer to terminate Windows Warding Module.

Do not hesitate to leave us a comment below, if you need any further assistance with rogue removal.