SystemGuard2009 Misleading Application

by Frank Jovine on 03/13/2009 in Fake Antivirus, Security

SystemGuard2009 is a Misleading Application that may give exaggerated reports of threats on the computer. These false threats fake users into purchasing the license to remove the so-called threat. Users need to know to never purchase anything from an unknown source. Your information could be used by these internet thieves who claim to help, but only steal your money and information!

Systems Affected: Windows XP, Windows Vista, Windows 2000
Risk Impact: Medium
Publisher: System Guard

The program must be manually installed.

The user is then prompted to pay for a full license of the application in order to remove the threats.

Installation

When the program is executed, it creates the following files:

%CurrentFolder%\conf.cfg
%CurrentFolder%\mbase.vdb
%CurrentFolder%\quarantine.vdb
%CurrentFolder%\queue.vdb
%CurrentFolder%\vbase.vdb

It also creates the following folder:
%CurrentFolder%\quarantine

Next, the program creates the following registry entry so that it executes whenever Windows starts: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”systemguard” = “[PATH TO EXECUTABLE]”

Don’t be tricked in downloading this Misleading Application!