Home Malware Programs Rogue Anti-Spyware Programs PC-Guide

PC-Guide

Posted: May 12, 2010

PC-Guide is a rogue anti-spyware program from South Korea. PC-Guide uses deceptive websites to spread and installed by malicious Trojan. Do not trust anything your PC produces once this rogue becomes active. It all a blatant scam to pilfer money from hapless Internet users. Make sure you use an updated anti-spyware program to remove all threats related to PC-Guide.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %ProgramFiles%\PcGuide
    2 %ProgramFiles%\PcGuide\PcGuide.exe
    3 %ProgramFiles%\PcGuide\PcGuideUpdater.exe
    4 %StartMenu%\Programs\PcGuide

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "C:\Program Files\PcGuide\PcGuideUpdater.exe"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run PcGuideHKEY_CURRENT_USER\Software\PcGuideHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEF61581-FD93-4fac-A44B-7A7C9EE5EED8}HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\CLSID\{EEF61581-FD93-4fac-A44B-7A7C9EE5EED8}HKEY_CLASSES_ROOT\Interface\{693D7386-E06D-43E7-957F-0EA6C3F67CFD}HKEY_CLASSES_ROOT\SSBHO.PGBLKBHOHKEY_CLASSES_ROOT\SSBHO.PGBLKBHO.1HKEY_CLASSES_ROOT\TypeLib\{268FE4EC-54EA-400C-B95C-D61234493028}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}PcGuide

Related Posts

Loading...