CoreGuard Safebrowser

CoreGuard Safebrowser Description

CoreGuard Safebrowser, also referred to as CoreGuard SafeExplorer, is a fake error message pop-up related to the rogue anti-spyware application CoreGuard Antivirus 2009. The CoreGuard Safebrowser pop-up resembles the recent dangerous CoreGuard Antivirus 2009 message, which aggressively appears on your system, claiming there are infections. The CoreGuard Antivirus 2009 infection that displays these CoreGuard Safebrowser pop-up messages is known to install Trojans such as Zlob, Generic and Vundo. Do not click on any suspicious pop-up windows or links that may appear on your computer, and remove CoreGuard Safebrowser pop-up immediately.

Technical Information

File System Details

CoreGuard Safebrowser creates the following file(s):
# File Name Detection Count
1 c:\Program Files\Coreguard Antivirus 2009\CoreExt.dll N/A
2 c:\Program Files\Coreguard Antivirus 2009\Uninstall.exe N/A
3 c:\Program Files\Coreguard Antivirus 2009\Coreguard 2009.exe N/A
4 c:\Program Files\Coreguard Antivirus 2009\firewall.dll N/A
5 c:\Program Files\Coreguard Antivirus 2009\Help\images N/A
6 c:\Program Files\Coreguard Antivirus 2009\Help\unreg.html N/A
7 c:\Program Files\Coreguard Antivirus 2009\Help\images\info.png N/A
8 c:\Program Files\Coreguard Antivirus 2009\Help\images\plus_circle.png N/A
9 c:\Program Files\Coreguard Antivirus 2009\Help\images\buttons\offline.gif N/A
10 %UserProfile%\Start Menu\Programs\Coreguard Antivirus 2009 N/A
11 %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Coreguard 2009.lnk N/A
12 c:\Program Files\Coreguard Antivirus 2009\Help N/A
13 c:\Program Files\Coreguard Antivirus 2009\Help\reg.html N/A
14 c:\Program Files\Coreguard Antivirus 2009\Help\images\delete.png N/A
15 c:\Program Files\Coreguard Antivirus 2009\Help\images\tick.png N/A
16 c:\Program Files\Coreguard Antivirus 2009\Help\images\buttons\online.gif N/A
17 c:\Program Files\Coreguard Antivirus 2009\core.cga N/A
18 %UserProfile%\Start Menu\Programs\Coreguard Antivirus 2009\Uninstall Coreguard Antivirus 2009.lnk N/A
19 c:\Program Files\Coreguard Antivirus 2009 N/A
20 c:\Program Files\Coreguard Antivirus 2009\Help\images\buttons N/A
21 c:\Program Files\Coreguard Antivirus 2009\Help\support.png N/A
22 c:\Program Files\Coreguard Antivirus 2009\Help\images\buttons\voice.gif N/A
23 c:\Program Files\Coreguard Antivirus 2009\Help\images\warn.png N/A
24 c:\Program Files\Coreguard Antivirus 2009\blacklist.cga N/A
25 %UserProfile%\Start Menu\Programs\Coreguard Antivirus 2009\Coreguard 2009.lnk N/A
26 %UserProfile%\Desktop\Coreguard 2009.lnk N/A

Registry Details

CoreGuard Safebrowser creates the following registry entry or registry entries:
Registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coreguard Antivirus 2009
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CURRENT_USER\Software\CoreGuard
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Coreguard Antivirus 2009"