Fake Anti Spyware.VIRTUALPCGUARD - Spyware Detector

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / Fake Anti Spyware.VIRTUALPCGUARD

Fake Anti Spyware.VIRTUALPCGUARD Technical Details

Category		Fake Anti Spyware
Discovered		1/10/2008 12:11:00 PM
Modified		9/25/2008 4:05:29 PM
Threat Level		Low

Category Description

These are programs which look like any legitimate program but usually download without users permission, entice users into buying them by showing fake results to improve users PC performance. They may also download spyware and other unwanted programs.

Description

VIRTUALPCGUARD is a new Fake Anti Spyware program. It spreads via Trojans, but it enters a system through browser too. It displays fake security messages. It may install additional spyware to user computer. It repairs its files, spread or update by itself. It violates user privacy and compromises user security.

Notice

Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically in our Research Lab as a result of executing Spyware Files or browsing Internet. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Software.

We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Summary

The following http urls were started:

• software.protectdownloads.com/ga/ds1100/AntiVirusSetupFree_en.exe
• software.protectdownloads.com/?action=18&gai=keyin_in_en&cnt=in&lng=en&gli=keyin&type...
• ykeeper.virtualpcguard.com/?action=1&gai=keyin_in_en&cnt=in&lng=en&gli=keyin&type=exe...

The hosts file was updated with the following url-to-ip mappings: NA

The following internet connection was established:

85.17.4.104 : 80
85.17.4.200 : 80
72.55.170.145 : 80

Process		install_en.exe, PGS.exe, bm.exe
Drivers		%WIN.SYS32.DRIVERS%\DHLP.SYS
Folder Created		%ROOT%\VIRTUALPCGUARD %PFDIR%\VIRTUALPCGUARD %PROGRAM_FILES_COMMON%\VIRTUALPCGUARD %COMMON_PROGRAMS%\VIRTUALPCGUARD %COMMON_APPDATA%\VIRTUALPCGUARD

The following Files were created:

Name	Version	Publisher	Signature (MD5)	File Size (in KB)
..\install_en.exe	1.3.122.1	locussoftware, inc.	370e56560e02e88aaf6356d18fda1c4f	190216
..\SETUP.EXE	2.2.366.12	MAGIC SOFTLINE LTD.		15651608
..\VIRTUALPCGUARD\PGS.EXE	2.2.289.11	MAGIC SOFTLINE LTD.	379418267EA88BA077D9530E00E12122	2043904
..\VIRTUALPCGUARD\SQLITE3.DLL			55012add096c9e6928ac096aefff253e	247232
..\UP\PGUPDATER.DAT				349
..\AWBASE\VBPV.DAT				10
..\PLUGINS\SCANDLDR.DLL			84482d14152a9202c605d61d77809a7d	1123285
..\PLUGINS\SCANKRNL.DLL	2.7.6.1		91344f456badf4053c01663e8b8dd8e0	293888
..\PLUGINS\SCANTOOL.DLL			a91ddae3949f2d954b1e435a68d7624a	114320
..\PLUGINS\UNADBX.DLL			3f742797f3a89980159019feb17a424b	286720
..\PLUGINS\UNPACKS.DLL			e17370296861d8a15f9c6bdd4b2c2df0	373419
..\UPDATE\UA27602.DLL			87bc18887ee68d636b7d71159cfaae36	153123
..\PLUGINS\VBPV.DAT				10
..\DAT\ACTIVATE.DAT				308
..\DAT\INCMP.DAT				129
..\VIRTUALPCGUARD\ACTIVATE.EXE			1a9090c0798f89795d653f1065be81f7	152064
..\UP\ASUPDATER.DAT				349
..\UP\GUP.EXE	1.2.93.0		586d833478111a1f6d5492f2fdf1f4f4	716800
..\UP\UPDATER.DAT				253
..\PLUGINS\SCANBCDR.DLL			4001f8bd5d48ec30b61479bfae91e157	913355
..\PLUGINS\SCANFUNC.DLL			636e5d27c3798e12a97f5d8b37620f98	63004
..\PLUGINS\SCANSCR.DLL			afbbdcb570928407bd8f8602ba54859b	276532
..\PLUGINS\UNACPU.DLL			46b810693c6db63897949566248281fd	9728
..\PLUGINS\UNPACK.DLL			4ecbf71a0ee92ad5133fe38f2da1ea57	331275

The following Registry Entries were created:

•	..\Software\Microsoft\Windows\CurrentVersion\Uninstall\uavun_is1
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"VIRTUALPCGUARD"\"%PF%\VIRTUALPCGUARD\PGS.EXE"
•	..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C3F6257-3E00-45C2-88D5-CB0F3A17BF0E}
•	..\Software\Classes\Typelib\{ea7522f6-87cf-411e-8a55-19ee4344b676}
•	..\Software\Classes\POPUPBLOCKER.IEGPB.1
•	..\Software\products
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"UGAC"\""%PF.COMMON%\VIRTUA~1\UGAC.EXE" -START"
•	..\Software\VIRTUALPCGUARD
•	..\Software\Classes\Typelib\{d761645b-6b20-4698-aee8-729981152a82}
•	..\System\CurrentControlSet\Services\dhlp
•	..\Software\Classes\POPUPBLOCKER.IEGPB
•	..\Software\ugac
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"PTASK"\"%PF%\VIRTUALPCGUARD\PTASK.EXE"
•	..\Software\Classes\Clsid\{6f87f145-dc2d-4766-af03-3a3b96ffad98}
•	..\Software\Classes\Appid\{ea7522f6-87cf-411e-8a55-19ee4344b676}
•	..\Software\Classes\SBIEBHO.IEFW.2
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"BMN"\""%PF.COMMON%\VIRTUALPCGUARD\BM.EXE" DM=HTTP://VIRTUALPCGUARD.COM AD=HTTP://VIRTUALPCGUARD.COM SD=HTTP://YKEEPER.VIRTUALPCGUARD.C"
•	..\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\USER AGENT\POST PLATFORM\"UGA6P11 2.2.366.12"
•	..\Software\Classes\Clsid\{5c3f6257-3e00-45c2-88d5-cb0f3a17bf0e}
•	..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6F87F145-DC2D-4766-AF03-3A3B96FFAD98}
•	..\Software\Classes\Appid\pblock.dll
•	..\Software\Classes\SBIEBHO.IEFW

Snapshot

Recommendation to remove Fake Anti Spyware.VIRTUALPCGUARD

Spyware Detector can remove Fake Anti Spyware.VIRTUALPCGUARD, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized E-mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.
	Speed up your computer and increase browsing performance by deleting Spyware & Adware
	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.
	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat