PC-Guide
PC-Guide is a fake security program. PC-Guide can be obtained when visiting malicious websites or it can be secretly installed by Trojans. On infiltrating a system, PC-Guide will simulate a fake system scan and report numerous malware infections. Following this, an offer will be made to delete all the detected threats after the victim purchases the "licensed" version of PC-Guide. The fake scan report, security alerts and pop-up warnings usually scare victims into following the recommendation and purchasing the useless PC-Guide application. Do not fall for this scam; all the security notifications are fake and the licensed version of PC-Guide does not even exist.
File System Details
PC-Guide may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %ProgramFiles%\PcGuide\PcGuideUpdater.exe | |
| 2. | %ProgramFiles%\PcGuide\PcGuide.exe | |
| 3. | %StartMenu%\Programs\PcGuide | |
| 4. | %ProgramFiles%\PcGuide |
Registry Details
PC-Guide may create the following registry entry or registry entries:
HKEY_CLASSES_ROOT\Interface\{693D7386-E06D-43E7-957F-0EA6C3F67CFD}
HKEY_CLASSES_ROOT\TypeLib\{268FE4EC-54EA-400C-B95C-D61234493028}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run PcGuide
HKEY_CLASSES_ROOT\CLSID\{EEF61581-FD93-4fac-A44B-7A7C9EE5EED8}
HKEY_CLASSES_ROOT\SSBHO.PGBLKBHO.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PcGuide
HKEY_CURRENT_USER\Software\PcGuide
HKEY_CLASSES_ROOT\SSBHO.PGBLKBHO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEF61581-FD93-4fac-A44B-7A7C9EE5EED8}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "C:\Program Files\PcGuide\PcGuideUpdater.exe"
