Spyware Guard 2008 Description

SpywareGuard 2008 is a fake anti-spyware program. SpywareGuard 2008 can be installed through the use of a Trojan horse without knowledge to you. After SpywareGuard 2008 is installed onto your computer, it can then populate the system registry with several malicious entries that load upon startup of Windows.

SpywareGuard 2008 will display fake warning messages and conduct system scans that return bogus results all in an effort to push you into purchasing a full version of SpywareGuard 2008. SpywareGuard 2008 in full version form is unable to detect or remove any type of computer parasite.

Type: Rogue AntiSpyware Programs

How Can You Detect Spyware Guard 2008?

Spyware Guard 2008 Technical Report

As new Spyware Guard 2008 details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Spyware Guard 2008 files with its MD5s were created in the system:

‘How Spyware Guard 2008 Infects Your Computer’ Video

Spyware Guard 2008 Removal Details

Spyware Guard 2008 has typically the following processes in memory:

• %UserProfile%\Application Data\Microsoft\Internet Explorer\olesys.dll
• %PROGRAMFILES%\Spyware Guard 2008\spywareguard.exe
• %SYSTEMROOT%\system32\wsc32x.exe
• wsc32x.exe
• %SYSTEMROOT%\system32\winscenter.exe
• %USERPROFILE%\application data\microsoft\internet explorer\dlls\moduleie.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\moduleie.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\tcqvrzndns.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\cclgwzzadh.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\xfoixoeloq.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\dkwpsdctxj.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\qychlykios.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\qrterkocjk.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\sowuxgmbzt.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\ajbkogdcas.dll
• %USERPROFILE%\application data\microsoft\internet explorer\dlls\hyckgjthbm.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\chqigjvnsh.dll
• %Windìr%\vmreg.dll
• spywareguard.exe
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\olesys.dll
• %ALLUSERSPROFILE%\application data\microsoft\protect\ie.dll
• winscenter.exe
• %USERPROFILE%\application data\microsoft\internet explorer\dlls\dnctirxael.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\cxtskpqynx.dll
• SpywareGuard2008.exe
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\jhjqosmxio.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\vgcugmtknb.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\csflndmpof.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\rqtdlfaorp.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\drhlmmxplk.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\wstdzgcesr.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\jpceqlrhqp.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\qlolrxuhqi.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\jsiitpwzvx.dll
• %Windìr%\sys.com
• SpywareGuard2008[1].exe
• olesys.dll
• %ALLUSERSPROFILE%\application data\microsoft\protect\gfbnrcgvfr.dll
• %ALLUSERSPROFILE%\application data\microsoft\protect\qlpygbnqit.dll
• %USERPROFILE%\application data\microsoft\internet explorer\dlls\iemodule.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\iemodule.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\xdoeoizbow.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\ajapetrkzq.dll
• SpywareGuard2008[2].exe
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\omexpqrvbt.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\zqotakbhik.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\akpykdjiau.dll
• %PROGRAMFILES%\Spyware Guard 2009\spywareguard.exe
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\dpaijjyvdt.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\mrygjqlkvh.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\aszfvmhrod.dll

Spyware Guard 2008 creates the following files in the system:

• %ProgramFiles%\Spyware Guard 2008\mbase.vdb
• %ProgramFiles%\Spyware Guard 2008\vbase.vdb
• %UserProfile%\Start Menu\Programs\Spyware Guard 2008\
• spywareguard
• %ProgramFiles%\Spyware Guard 2008\conf.cfg
• %ProgramFiles%\Spyware Guard 2008\queue.vdb
• %UserProfile%\Start Menu\Programs\Spyware Guard 2008\Uninstall.lnk
• Spyware Guard 2008.lnk
• %ProgramFiles%\Spyware Guard 2008\
• %ProgramFiles%\Spyware Guard 2008\quarantine.vdb
• %UserProfile%\Start Menu\Programs\Spyware Guard 2008\Spyware Guard 2008.lnk
• %UserProfile%\Desktop\Spyware Guard 2008.lnk

Spyware Guard 2008 created the following directories, files, paths:

• %ProgramFiles%\Spyware Guard 2008
• %UserProfile%\Start Menu\Programs\Spyware Guard 2008

Spyware Guard 2008 creates the following registry entries:

• Spyware Guard 2008
• Spyware Guard
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “SpywareGuard2008″

Important Article Disclaimer