Home Malware Programs Rogue Anti-Spyware Programs SearchGuard

SearchGuard

Posted: November 18, 2010

SearchGuard (or Search Guard) is a rogue anti-spyware application that was designed to swindle users out of their money. SearchGuard spreads via Trojans. Once Search Guard is inside a system it will display fake security alerts and simulate fake system scans that will report the detection of dangerous malware. Then SearchGuard will prompt the user to purchase it "full version" in order to remove all the "detected" threats. This is a blatant scam to pilfer your money. Search Guard can neither detect nor remove computer threats. Remove it immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 C:\Documents and Settings\{username}\Desktop\searchguardsetup.exe
    2 C:\Documents and Settings\{username}\Local Settings\Temporary Internet Files\Content.IE5\18GY3K5D\searchguardbk[1].exe
    3 C:\Documents and Settings\{username}\Local Settings\Temporary Internet Files\Content.IE5\18GY3K5D\searchguardu[1].exe
    4 C:\Documents and Settings\{username}\Local Settings\Temporary Internet Files\Content.IE5\ISF6HJK1\uninst_searchguard[1].exe
    5 C:\Documents and Settings\{username}\Local Settings\Temporary Internet Files\Content.IE5\VAD23EEL\searchguard[1].exe
    6 C:\Program Files\searchguard
    7 C:\Program Files\searchguard\searchguard.exe
    8 C:\Program Files\searchguard\searchguardbk.exe
    9 C:\Program Files\searchguard\searchguardd.dll
    10 C:\Program Files\searchguard\searchguarddata
    11 C:\Program Files\searchguard\searchguardu.exe
    12 C:\WINDOWS\system32\uninst_searchguard.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\searchguard_searchguardHKEY_LOCAL_MACHINE\SOFTWARE\searchguardHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}searchguard
Loading...