PC Security Guardian

PC Security Guardian is a rogue security program. Make no mistake about PC Security Guardian; this malicious rogue security program is not designed for security or to guard your computer in any way. In fact, this rogue security program does the complete opposite. PC Security Guardian is designed to create a large number of problems on any computer PC Security Guardian is installed. PC Security Guardian does this to convince inexperienced computer users into buying PC Security Guardian to remove the very problems PC Security Guardian created. Our ESG malware researchers strongly recommend that you remove immediately PC Security Guardian from your computer.
 

The Nefarious Tactics of PC Security Guardian and Its Friends

Our team of ESG security researchers has identified numerous clones of PC Security Guardian, all of which are identical, except for a few minor changes in their interfaces. These clones include Virus Melt, Presto TuneUp, Fast Antivirus 2009, Extra Antivirus, Windows Security Suite, Smart Virus Eliminator, Packed.Generic.245, Volcano Security Suite, Windows Enterprise Suite, Enterprise Suite, Additional Guard, PC Live Guard, Live PC Care, Live Enterprise Suite, Security Antivirus, My Security Wall, CleanUp Antivirus, Smart Security, Windows Protection Suite, Windows Work Catalyst.

PC Security Guardian and its clones imitate the appearance of real security programs. The way these rogue security programs work is that they first deliberately wreak havoc on a computer system. Then, PC Security Guardian and its clones offer to fix the problems they created if the computer user pays for a "license" to use these programs. Below are some typical situations directly caused by PC Security Guardian:

  • PC Security Guardian creates a large number of garbage files on your computer, which PC Security Guardian then identifies as threats in its fake computer scan.
  • PC Security Guardian displays constant fake security alerts and annoying pop-up notifications.
  • PC Security Guardian may cause your computer system to become extremely unstable and unresponsive.
  • PC Security Guardian may interfere with your online activity, relay your online activities to a third party, and change your Internet browser settings.

Removing This Fake “Guardian” from Your Computer System

Our ESG researcher team recommends using an anti-malware program that is fully updated to remove this harmful threat from your computer. PC Security Guardian has been known to block legitimate security programs from launching. To bypass this "feature," our ESG security researchers recommend launching Windows in Safe Mode. Simply press the F8 key while starting up and select "Safe Mode" from the list of options. To stop the most annoying effects of PC Security Guardian, you may enter the code U2FD-S2LA-H4KA-UEPB into the registration entry form. It is important to understand that this registration code will not remove PC Security Guardian from your computer; all it will do is make some of the symptoms stop. You will still need to remove this harmful rogue security program with a real security program.

File System Details

PC Security Guardian may create the following file(s):
# File Name Detections
1. %CommonAppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].ocx
2. %CommonAppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe
3. %CommonAppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].dll
4. %CommonAppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS]
5. %AppData%\PC Security Guardian\cookies.sqlite
6. %CommonAppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].mof
7. %AppData%\PC Security Guardian\Instructions.ini
8. %CommonAppData%\[RANDOM CHARACTERS]
9. %AppData%\PC Security Guardian

Registry Details

PC Security Guardian may create the following registry entry or registry entries:
HKCU\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "PC Security Guardian"
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options "Debugger" = "svchost.exe"
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1"
HKCR\PersonalSS.DocHostUIHandler

Messages

The following messages associated with PC Security Guardian were found:

System alert
PC Security Guardian has detected potentially harmful software in
your system. It is strongly recommended that you register
PC Security Guardian to remove all found threats immediately.
System warning
No real-time malware, spyware and virus protection was
found. Click here to activate.
Warning
Warning! Virus detected
Warning! Identity theft attempt detected
Hidden connection IP: 128.154.26.11
Target: Microsoft Corporation keys

Trending

Most Viewed

Loading...