Spyware Guard 2009 Description

Spyware Guard 2009 or SpywareGuard 2009, is a rogue anti-spyware application. Once installed, Spyware Guard 2009 will simulate malware detections on the user’s computer system, generating fake notifications in an attempt to trick the user into buying the full Spyware Guard 2009 commercial version. If a notification is clicked, the user will be redirected to rogue websites that promote rogue softwares to clean the supposed threats. These scare tactics are only used by Spyware Guard 2009 to sell its product. Spyware Guard 2009 may seem a trustworthy program, however, it’s just a scam to download and install additional adware and spyware and steal the user’s money.

Type: Rogue AntiSpyware Programs

How Can You Detect Spyware Guard 2009?

Spyware Guard 2009 Technical Report

As new Spyware Guard 2009 details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Spyware Guard 2009 files with its MD5s were created in the system:

Spyware Guard 2009 has typically the following processes in memory:

• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\ldycgadzmr.dll
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\xfzdhozini.dll
• wsc32x.exe
• qlpygbnqit.dll
• iemodule.dll
• txxrphkvip.dll
• qrterkocjk.dll
• xdoeoizbow.dll
• omexpqrvbt.dll
• zqotakbhik.dll
• jhjqosmxio.dll
• %Windìr%\sys.com
• %Windìr%\vmreg.dll
• %ProgramFiles%\Spyware Guard 2008\uninstall.exe
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\iemodule.dll
• %PROGRAMFILES%\Spyware Guard 2009\spywareguard.exe
• SpywareGuard2008[2].exe
• ie.dll
• dnctirxael.dll
• qychlykios.dll
• drhlmmxplk.dll
• cxtskpqynx.dll
• xfoixoeloq.dll
• dkwpsdctxj.dll
• ajapetrkzq.dll
• %Windìr%\reged.exe
• %Windìr%\sysexplorer.exe
• %ProgramFiles%\Spyware Guard 2008\spywareguard.exe
• %SYSTEMROOT%\system32\winscenter.exe
• SpywareGuard2008[1].exe
• %ALLUSERSPROFILE%\application data\microsoft\internet explorer\dlls\cfloxicgne.dll
• gfbnrcgvfr.dll
• moduleie.dll
• rqtdlfaorp.dll
• akpykdjiau.dll
• winscenter.exe
• vgcugmtknb.dll
• csflndmpof.dll
• tcqvrzndns.dll
• cclgwzzadh.dll
• %Windìr%\syscert.exe
• %Windìr%\spoolsystem.exe
• %UserProfile%\Application Data\Microsoft\Internet Explorer\olesys.dll

Spyware Guard 2009 created the following directories, files, paths:

• %ProgramFiles%\Spyware Guard 2009

Spyware Guard 2009 creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spyware Guard 2008
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “spywareguard”
• HKEY_CURRENT_USER\Software\Spyware Guard
• Spyware Guard 2009

Important Article Disclaimer