Home Malware Programs Rogue Anti-Spyware Programs XL Guarder

XL Guarder

Posted: July 24, 2008

Threat Metric

Threat Level: 10/10
Infected PCs: 19
First Seen: July 24, 2009
Last Seen: October 29, 2021
OS(es) Affected: Windows

ScreenshotXL Guarder, also known as XLGuarder, XLife Guarder or XLG Security Center, is a rogue anti-spyware program. You may have downloaded XL Guarder thinking it would solve your spyware issues, or it may have infected your computer with the help of Trojan Zlob or Vundo. Anyways, once you're infected with XL Guarder, it will use aggressive advertising methods to push it's rogue website (xlguarder.com) and sell its product, claiming to be able to clean your computer from spyware. XL Guarder's deceptive methods include: rogue popups, system notification messages and scan reports.

XLife Guarder will try to convince you that you're infected with a load of spyware, when, in reality, is XLG Security Center the cause of the spyware. XLGuarder is able to emulate a system scan and report a list of supposed infections to scare you and to push you into buying the full XL Guarder version. XLGuarder may launch on every Windows startup.

Aliases

Medium Risk Malware [Prevx1]Win32/Adware.XLGuarder.E [NOD32]Trojan.LooksLike.Backdoor.Hupigon [McAfee-GW-Edition]potentially unwanted program Generic PUP [McAfee]not-a-virus:FraudTool.Win32.XLGuarder.e [Kaspersky]Non-Virus: [K7AntiVirus]PHISH.Fraud.XLGuarder [Ikarus]Misc/XLGuarder [Fortinet]FraudTool.Win32.XLGuarder.e [F-Secure]Trojan.Fakealert.1352 [DrWeb]Unclassified Malware [Comodo]Trojan.Generic.748904 [BitDefender]W32/Heuristic-210!Eldorado [Authentium]FraudTool/Win32.XLGuarder [Antiy-AVL]PHISH/Fraud.XLGuarder.E [AntiVir]
More aliases (38)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



iebho.dll File name: iebho.dll
Size: 445.44 KB (445440 bytes)
MD5: bee12ba669cc4a30a65824cc244bd47f
Detection count: 35
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
sysutil.exe File name: sysutil.exe
Size: 3.61 MB (3612160 bytes)
MD5: d0bbfbc59bb7a000d7fc740a9956828c
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
winsystip.exe File name: winsystip.exe
Size: 481.79 KB (481792 bytes)
MD5: 2c8639e30dcf911c4616ddd9ea6fa079
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
sysguard.exe File name: sysguard.exe
Size: 473.08 KB (473088 bytes)
MD5: c89142843031df48f6764d1580fd67bd
Detection count: 4
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009

Registry Modifications

The following newly produced Registry Values are:

CLSID{D032570A-5F63-4812-A094-87D007C23012}

2 Comments

  • Eirik says:

    i cannot access my start menu whwn the XL guard i running. And its running all the time. How do i get rid of it then?

  • Eighty8_fingers says:

    This is a clever (and malicious) virus!!! I had to go onto another computer to have Google search for this instruction. Whenever I searched for "XLGuard" "spyware" "virus" or any similiar keywords, the browser will just remain idle... as if I've never clicked on the SEARCH button. I'm downloading this spyware removal to my flash drive (... on my desktop at work). When I get home, I'll load it onto my home system and see if that will work.
    Thanks.

Loading...