Home Malware Programs Trojans ErrorGuard

ErrorGuard

Posted: May 9, 2006

Threat Metric

Threat Level: 9/10
Infected PCs: 105
First Seen: July 24, 2009
Last Seen: March 17, 2023
OS(es) Affected: Windows

ErrorGuard is a fake anti-spyware program that is often downloaded and installed by a Trojan or through browser security holes. Error Guard launches on Windows startup and may generate large numbers of popup adverts. It will also display notifications of imaginary security risks in its attempts to get the user to purchase the full version. ErrorGuard can be extremely difficult to remove manually, and will continue to try to recreate itself. ErrorGuard has previously advertised through Claria/Gator.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Users\<username>\Desktop\ady\RRHH (D)\System Volume Information\_restore{561893F3-5E3F-4CF6-BFBA-0F0C8899DFA0}\RP63\A0010834.exe File name: A0010834.exe
Size: 157.74 KB (157745 bytes)
MD5: 1150b61a03aa714ea5e12c46fd966359
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\Desktop\ady\RRHH (D)\System Volume Information\_restore{561893F3-5E3F-4CF6-BFBA-0F0C8899DFA0}\RP63\A0010834.exe
Group: Malware file
Last Updated: April 17, 2021
ErrorGuard.Exe File name: ErrorGuard.Exe
Size: 1.28 MB (1286144 bytes)
MD5: f9da8d692cedbf0fce306843ddbb5631
Detection count: 7
File type: Executable File
Mime Type: unknown/Exe
Group: Malware file
Last Updated: March 17, 2023

Registry Modifications

The following newly produced Registry Values are:

File name without pathErrorGuard.exeErrorGuard.lnksetuperrorguard[1].exe

Additional Information

The following cookies were detected:
errorguard

2 Comments

  • James K Nduli says:

    I discovered that ErrorGuard seemed to interfere with the operation of my Roxio. I have uninstalled it but there is an executable file that is in the C:\WINDOWS directory. How do I safely remove this? How do I safely remove an unwanted executable file from the C:\WINDOWS directory?

  • Robbin R. Wohl says:

    I had Error Guard. What a mistake. Tons of popup adverts, problems with start up and performance, even obscene emails. I bought Pop UpBlocker and some other programs, plus some free downloads and updates from . Problems seemed to be recreating themselves - was it my imagination? Hell no. A great friend turned me on to your site and explained this problem to me. What a lesson. Thank you for all of the explanatory information you provide, as it enriches the learning lesson for the user, and enhances prevention goals and objectives. And my PC is working better all of the time. I teach Beginning Computing at the Senior Center here, and this material is definitely included in lesson three. Thanks again. Readers, read and learn - and save yourself time, money and miseries.

Loading...