English 
PSGuard PSGuard
By
GoldSparrow in 
Loading ...
PSGuard Description
Type: Malware
Automatic Detection of PSGuard
PSGuard has typically the following processes in memory:
- psguardinstall.exe
- oleext.dll
- uninstiu.exe
- psguard.exe
- localization.dll
- wndsystem.dll
- intell32.exe
- core.dll
- oleext32.dll
PSGuard creates the following registry entries:
- 15DC7116-E58E-4395-A45A-A1C99B17C030
- 1C94EA51-3800-4F08-B5DC-A5B67823FFEA
- 2C462D06-3BA0-48BB-9282-BB6519FE86E9
- 7B6A3434-8625-4ABF-B79D-09D98C2498C4
- A00E2305-7001-4200-BA00-5779F9A3E7D3
- B26B5883-F15F-4283-B3D5-A1728077DE47
- CB9385AB-8541-4B2F-A363-48F64C612993
- D6A7D177-0B2F-4283-B2E8-B6310A45E606
- F4364EEC-31F5-4B8B-A7E0-3B6394C9D23F
- HKEY_CURRENT_USERControlPanelDesktopWallpaperStyle=0
- HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemNoDispAppearancePage=1
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallInternetUpdate
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunPSGuard
- 1BD98DFD-2DA9-4C54-85D7-BE03A0F9C487
- 28FEDB90-53C7-4928-994A-CEE782606507
- 4723879B-8F52-4BE7-9994-626AFA539366
- 8EC33B7D-9953-4EDB-ACE2-D4C105968601
- A917B2F3-A9BF-477C-A0E3-0382D0376159
- C6E2A22C-B3A8-43A4-B5EC-A5BB671AB3F7
- D5D6E9B5-30D5-4457-AC8B-399205F50411
- F100A342-3AC5-47FF-B5B3-FCDB6FC9F016
- F61D1CE1-5199-4B57-B59E-C6819EA92F3B
- HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerNoActiveDesktopChanges=1
- HKEY_LOCAL_MACHINESOFTWAREShudderLTDPSGuard
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunintell32.exe
- 17E02586-A91D-4A9D-A74E-187B05DFFE6F
- 20F8B70D-9F16-4DCB-8788-90A0498E46B9
- 3A350193-C7F7-4E10-B347-02FF4C3CC4E9
- 8B6C0168-BAAC-4C7C-911E-0132590F5661
- A20F5672-7486-4D27-BD2B-E555E4692C5F
- B803D266-A08D-4A4C-9604-6D35689ABE09
- CF1674CC-EC9A-4AEE-996E-65A8F7C0B0E4
- E0D6C30A-B9A3-4181-8099-3B0D5A2B98AF
- 982392F9-9C65-48B4-B667-3459C46630D1
- HKEY_CURRENT_USERControlPanelDesktopWallpaper=%System%wppp.html
- HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemNoDispBackgroundPage=1
Important Article Disclaimer
This entry was posted
on 04/2/08 and is filed under Malware.
You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
