Jump to content

Malwarebytes

XLGuarder


2 replies to this topic

#1
Guest_remixed_*

  • Guests
<ip address/hostname>
69.50.162.182
xlguarder.com
Host reachable, 173 ms. average
<net block>
69.50.160.0 - 69.50.191.255
<name servers>
MAIL.ATRIVO.COM
PAVEL.ATRIVO.COM
<additional data>
INTERCAGE-NETWORK-GROUP
Created: 2003-06-04
Updated: 2005-09-01
Source: whois.arin.net

http://www.symantec.com/norton/security_re...-99&tabid=2

#2
Burak

    New Member

  • Members
  • Pip
  • 31 posts
  • Gender:Male
MBAM is not removing fully. Because new variants added by this program with new version (Xlg Guarder or Xlg Security Center.)


Folders

C:\WINDOWS\sysguard
C:\WINDOWS\sysguard\warning

Registry
[HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon]
"Shell"="C:\WINDOWS\sysguard\sysguard.exe"

Files
C:\WINDOWS\sysguard\img\bg_fixed.jpg
C:\WINDOWS\sysguard\img\bg_licence.jpg
C:\WINDOWS\sysguard\img\bg_main.jpg
C:\WINDOWS\sysguard\img\bg_warning.jpg
C:\WINDOWS\sysguard\img\splash.jpg
C:\WINDOWS\sysguard\settings.ini
C:\WINDOWS\sysguard\sounds\1.mp3
C:\WINDOWS\sysguard\sounds\2.mp3
C:\WINDOWS\sysguard\sounds\3.mp3
C:\WINDOWS\sysguard\sysguard.exe
C:\WINDOWS\sysguard\sysguard_s.exe
C:\WINDOWS\sysguard\tipguard.exe
C:\WINDOWS\sysguard\uninstall.exe
C:\WINDOWS\sysguard\warning\alertpage.jpg
C:\WINDOWS\sysguard\warning\spacer.gif
C:\WINDOWS\sysguard\warning\warnpage.html


C:\WINDOWS\sysguard not removing by Mbam.
C:\WINDOWS\sysutils removing succesfully by Mbam.

#3
nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,158 posts
  • Location:Northampton, MA USA
This will be fixed shortly
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us