Home Malware Programs Rogue Anti-Spyware Programs CoreGuard Antivirus 2009

CoreGuard Antivirus 2009

Posted: April 30, 2009

Threat Metric

Ranking: 4,935
Threat Level: 10/10
Infected PCs: 2,600
First Seen: July 24, 2009
Last Seen: October 12, 2023
OS(es) Affected: Windows

ScreenshotCoreGuard Antivirus 2009, or CoreGuardAntivirus2009, is a rogue anti-spyware program that, like its predecessors, causes confusion among computer users by either naming itself similarly to legitimate anti-spyware programs or by using security alert messages with bogus statements, but CoreGuard Antivirus 2009 has another dimension to its art of deception. CoreGuard Antivirus 2009 can detect legitimate programs installed on your computer and uninstall them.

Once CoreGuard Antivirus 2009 is installed, it uses to its advantage the Registry key that has the list of programs that Windows uses to uninstall programs from your computer.

CoreGuard Antivirus 2009 uses the following message as a ploy to cause confusion and lead you into assuming that it's a legitimate program that is simply having installation issues because it detects the presence of an unauthorized antivirus program:

"There is unauthorized antivirus software detected on your computer. It is recommended you to remove it, otherwise it could conflict with CoreGusard Antivirus 2009."

CoreGuard Antivirus 2009 will use fake security messages to urge you to download their software and will prompt you into purchasing the full version of CoreGuard Antivirus 2009. CoreGuard Antivirus 2009 is part of the same family of rogue anti-spyware programs as Antivirus 2009, Antivirus 2008 and Antivirus 360. CoreGuard Antivirus 2009 will also launch on every Windows startup and may display excessive popup ads. CoreGuard Antivirus 2009 may be difficult to remove manually because it has the ability to recreate itself and remove legitimate anti-spyware programs.

ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

Aliases

Packed.Generic.277 [Symantec]Trojan.Win32.Generic.pak!cobra [Sunbelt]Mal/TDSSPack-Q [Sophos]Win32/Adware.CoreguardAntivirus.D [NOD32]Trojan:Win32/FakeCog [Microsoft]Trojan.FakeCog.A.91 [McAfee-GW-Edition]Generic FakeAlert!gf [McAfee]Trojan.Win32.Tdss.aysr [Kaspersky]Trojan.Win32.FakeCog [Ikarus]W32/FakeAV.AYSR!tr [Fortinet]Trojan.Tdss.aysr [CAT-QuickHeal]Gen:Variant.TDss.1 [BitDefender]SHeur3.JMC [AVG]Win32:Jifas-EO [Avast]Trojan/Win32.Tdss.gen [Antiy-AVL]
More aliases (39)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



Coreguard_2009.exe File name: Coreguard_2009.exe
Size: 1.93 MB (1933312 bytes)
MD5: c44d58d48705de55d9b3df4e79f07b59
Detection count: 97
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
diskperfxp.exe File name: diskperfxp.exe
Size: 691.71 KB (691712 bytes)
MD5: 10e56f20f81e5dface0a02bc1b87a65c
Detection count: 87
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: April 15, 2010
richtx64.exe File name: richtx64.exe
Size: 548.86 KB (548864 bytes)
MD5: 58f2cf5434a85f9dd886e56f52f531d1
Detection count: 57
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 8, 2010
C:\Documents and Settings\<username>\Documenti\Download\***s Rogue Pack\***'s Rogue Pack\CoreGuardAntivirus2009Installer.exe File name: CoreGuardAntivirus2009Installer.exe
Size: 476.67 KB (476672 bytes)
MD5: 4d74eb4466c51e55f7b49135bc36e64d
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: C:\Documents and Settings\<username>\Documenti\Download\***s Rogue Pack\***'s Rogue Pack\CoreGuardAntivirus2009Installer.exe
Group: Malware file
Last Updated: January 23, 2022

Additional Information

The following directories were created:
%ProgramFiles%\Coreguard Antivirus 2009
The following cookies were detected:
coreguard

Related Posts

Loading...