CoreGuard Safebrowser Description

CoreGuard Safebrowser, also referred to as CoreGuard SafeExplorer, is a fake error message pop-up related to the rogue anti-spyware application CoreGuard Antivirus 2009. The CoreGuard Safebrowser pop-up resembles the recent dangerous CoreGuard Antivirus 2009 message, which aggressively appears on your system, claiming there are infections. The CoreGuard Antivirus 2009 infection that displays these CoreGuard Safebrowser pop-up messages is known to install Trojans such as Zlob, Generic and Vundo. Do not click on any suspicious pop-up windows or links that may appear on your computer, and remove CoreGuard Safebrowser pop-up immediately.

Type: Fake Warning Messages

How Can You Detect CoreGuard Safebrowser?

CoreGuard Safebrowser has typically the following processes in memory:

• c:\Program Files\Coreguard Antivirus 2009\CoreExt.dll
• c:\Program Files\Coreguard Antivirus 2009\Uninstall.exe
• c:\Program Files\Coreguard Antivirus 2009\Coreguard 2009.exe
• c:\Program Files\Coreguard Antivirus 2009\firewall.dll

CoreGuard Safebrowser creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coreguard Antivirus 2009
• HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
• HKEY_CURRENT_USER\Software\CoreGuard
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Coreguard Antivirus 2009″

Important Article Disclaimer