CoreGuard Antivirus 2009 AKA Core Guard Antivirus 2009 is a rouge security client that shows false viruses installed on a system. This is a fake security client and should NOT BE PURCHASED. Most people who are infected will notice that this program auto scans on start-up and will then show bogus scan results. These results are shown in an effort to scare the user into purchasing the fake security software. Users who are infected with CoreGuard Antivirus 2009 need to run a full scan using their favorite security client to remove this virus. If you do not have one or the one you have failed to remove this then download a copy of Spyware Doctor with Antivirus here. In most cases those who got infected got this from a fake video client that installed a trojan downloader program onto the computer. That program then went out and auto downloaded and installed CoreGuard Antivirus 2009. You should expcet to be infected with several other viruses besides this fake client.
Some symptoms of CoreGuard Antivirus 2009:
* Bogus Scan results * Auto Scans on Start-up * Warning coming out of a fake shield in the system tray * pop-ups and re-directs to the fake software’s website * constant warnings of being infected as well as false statements of other trojans
CoreGuard Antivirus 2009
Manual removal instructions for CoreGuard Antivirus 2009 Version: 1.0.0.1 ( Please read our disclaimer bellow )
Kill processes: Coreguard 2009.exe
Delete files: • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Coreguard 2009.lnk • %UserProfile%\Desktop\Coreguard 2009.lnk • %UserProfile%\Local Settings\Temp\[RANDOM CHARACTERS].mof • %UserProfile%\Local Settings\Temp\c.dat • %UserProfile%\Start Menu\Programs\Coreguard Antivirus 2009\Coreguard 2009.lnk • %UserProfile%\Start Menu\Programs\Coreguard Antivirus 2009\Uninstall Coreguard Antivirus 2009.lnk • %ProgramFiles%\Coreguard Antivirus 2009\blacklist.cga • %ProgramFiles%\Coreguard Antivirus 2009\core.cga • %ProgramFiles%\Coreguard Antivirus 2009\CoreExt.dll • %ProgramFiles%\Coreguard Antivirus 2009\Coreguard 2009.exe • %ProgramFiles%\Coreguard Antivirus 2009\firewall.dll • %ProgramFiles%\Coreguard Antivirus 2009\Help\images\buttons\offline.gif • %ProgramFiles%\Coreguard Antivirus 2009\Help\images\buttons\online.gif • %ProgramFiles%\Coreguard Antivirus 2009\Help\images\buttons\voice.gif • %ProgramFiles%\Coreguard Antivirus 2009\Help\images\delete.png • %ProgramFiles%\Coreguard Antivirus 2009\Help\images\info.png • %ProgramFiles%\Coreguard Antivirus 2009\Help\images\plus_circle.png • %ProgramFiles%\Coreguard Antivirus 2009\Help\images\tick.png • %ProgramFiles%\Coreguard Antivirus 2009\Help\images\warn.png • %ProgramFiles%\Coreguard Antivirus 2009\Help\reg.html • %ProgramFiles%\Coreguard Antivirus 2009\Help\support.png • %ProgramFiles%\Coreguard Antivirus 2009\Help\unreg.html • %ProgramFiles%\Coreguard Antivirus 2009\Uninstall.exe
Delete directories: •
%ProgramFiles%\Coreguard Antivirus 2009\
Please keep in mind that viruses mutate and change all the time. Do expect the above to change around a little. However this guide should work well for you and any experienced pro will be able to follow it and figure out the traces if they mutate. If you do not feel comfortable deleting files and the like then consider purchasing an antivirus client.
Outside Resources:
http://rogueantispyware.blogspot.com/2009/05/coreguard-antivirus-2009.html
http://www.symantec.com/security_response/writeup.jsp?docid=2009-043009-2213-99
Speak Your Mind