Windows Active Guard scam. The removal guide.

Windows Active Guard is a brand new virus that can infect your system. Users can catch the virus inside the web, that is why we suggest you to be as careful as you can. But there is no guarantee that antiviruses can see the rogue and prevent it from penetration. Nowadays hackers have figured out the way how their malicious programs can overcome our antivirus programs. Windows Active Guard acts like an antivirus for you. It has almost the same design. When the scam penetrates into your system it automatically begins to scan it and show you the results of the scanning. There can be a lot of threats, different scams and trojans. But, you should remember that you do not have any of those inside your system. They are just fake. Windows Active Guard virus creates its own fake names of rogues and scams for you to beleieve that your system is really infected with some malwares and needs to be repaired immediately.


Do not do anything Windows Active Guard says you or shows you. It will try to do anything it takes to make you believe that is programs it the best for your system and you need to buy it. This is all fake. We recommend you to eliminate Windows Active Guard virus from your system with the help of our anti-malware program GridinSoft Trojan Killer. If you have some troubles with removal process you can always write to our Support Team and they will gladly help you to handle them.

Windows Active Guard automatic remover:

Windows Active Guard manual remover:

Delete Windows Active Guard files:
Protector-[rnd].exe in %AppData% folder
Delete Windows Active Guard registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\Protector-[rnd].exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe

One thought on “Windows Active Guard scam. The removal guide.

Leave a Comment