Windows Microsoft Guardian Removal Guide

Windows Microsoft Guardian is a fake antivirus program which intend to urge the user whose computer is infected by Windows Microsoft Guardian to purchase the full version of Windows Microsoft Guardian. Windows Microsoft Guardian produces fake alert in order to cheat the user. Windows Microsoft Guardian installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Windows Microsoft Guardian will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Windows Microsoft Guardian to remove all the malwares.

Windows Microsoft Guardian can be removed by stopping its processes [random].exe and Windows Microsoft Guardian.exe and the user should remember to kill the file. The registry settings should be restored by following the removal guide below.

When downloaded and installed on a computer, Windows Microsoft Gaurdian displays continuous pop-up messages and bogus system scans in order to trick the user into thinking that there are numerous computer malware threats detected on the Windows that the user need to remove. By misleading the user into trusting that he or she need anti-virus software or a spyware protection tool, Windows Microsoft Guardian can convince the user to purchase the fake Windows Microsoft Guardian key. Sadly, Windows Microsoft Gaurdian will not work, and the user will only pay for this malicious program. Windows Microsoft Gaurdian just imitates computer protection activity without actually being able to accomplish any of the declared options.

Windows Microsoft Guardian should be removed immediately!

Windows Microsoft Guardian Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe
Windows Microsoft Guardian.exe
SpecialGuard.exe

Delete Registry
HKEY_LOCAL_MACHINE\Software\Windows Microsoft Guardian
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | Shell = “%AppData%\Microsoft\[random].exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe | Debugger
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe | Debugger
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe

Remove Folders and Files
Uninstall Windows Microsoft Guardian.lnk
Windows Microsoft Guardian.lnk
%AppData%\Microsoft\[random].exe