Thursday, December 11, 2008

ErrorGuard Ransomware

How To Remove ErrorGuard?
You must download trial version of "Exterminate-It" antivirus software,to check your computer instantly.
ErrorGuard is dangerous virus:
The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.


ErrorGuard Symptoms:

Files:
[%DESKTOP%]\ErrorGuard.lnk
[%PROFILE%]\cmd.exe
[%PROFILE%]\start
[%PROGRAMS%]\ErrorGuard\ErrorGuard.lnk
[%PROGRAMS%]\ErrorGuard\Uninstall.lnk
[%PROGRAMS%]\ErrorGuard\Website.lnk
[%PROGRAM_FILES%]\ErrorGuard\ErrorGuard.exe
[%PROGRAM_FILES%]\ErrorGuard\setupactive.exe
[%WINDOWS%]\Downloaded Program Files\Install.dll
[%WINDOWS%]\Downloaded Program Files\Install.inf
[%DESKTOP%]\ErrorGuard.lnk
[%PROFILE%]\cmd.exe
[%PROFILE%]\start
[%PROGRAMS%]\ErrorGuard\ErrorGuard.lnk
[%PROGRAMS%]\ErrorGuard\Uninstall.lnk
[%PROGRAMS%]\ErrorGuard\Website.lnk
[%PROGRAM_FILES%]\ErrorGuard\ErrorGuard.exe
[%PROGRAM_FILES%]\ErrorGuard\setupactive.exe
[%WINDOWS%]\Downloaded Program Files\Install.dll
[%WINDOWS%]\Downloaded Program Files\Install.inf

Folders:
[%PROGRAM_FILES%]\ErrorGuard

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{205FF73B-CA67-11D5-99DD-444553540006}
HKEY_CLASSES_ROOT\Install.Install
HKEY_CLASSES_ROOT\Install.Install.1
HKEY_CLASSES_ROOT\Interface\{205FF73A-CA67-11D5-99DD-444553540006}
HKEY_CLASSES_ROOT\TypeLib\{205FF72E-CA67-11D5-99DD-444553540006}
HKEY_CURRENT_USER\Software\ErrorGuard
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{205FF73B-CA67-11D5-99DD-444553540006}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Install.Install
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Install.Install.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{205FF73A-CA67-11D5-99DD-444553540006}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{205FF72E-CA67-11D5-99DD-444553540006}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{205FF73B-CA67-11D5-99DD-444553540006}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{205FF73B-CA67-11D5-99DD-444553540006}\DownloadInformation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ErrorGuard.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Error Guard


You must clean you computer ASAP !!!
Download Free Trial Version of antivirus software here, to check your computer instantly.

Also Be Aware of the Following Threats:
Grunt Trojan Cleaner
Satans.Back.Door Trojan Cleaner
Remove Bancos.FTZ Trojan
Pigeon.AWJP Trojan Information

No comments: