Personal Guard 2009

8 September 2009 Rogue 0 Comment

Personal Guard 2009 is a scam program that tries to exploit innocence of computer users regarding security applications and malware issues User who believes that it is beneficial or necessary can install personal Guard 2009 manually. When installation has succeeded, the rogue program opted to display enormous scare tactics in the form of warning messages and fabricated virus scan results. Personal Guard 2009 also runs a virus scan that shows artificial outcome. Threats included in the lists are result of authors’ imaginative notion to defraud victims in order to persuade them to obtain the commercial version of Personal Guard 2009.

Any of the prompt this rogue program produces to remove those threats will lead users into acquisition steps and redirect web browser to a payment facility. Before buying the program, download and install a legit anti-malware tool and see how it will react to Personal Guard 2009. If the legit program advises you to remove this dreaded fake antivirus, please do so. After all, you can obtain these malware removal tools free from legitimate developers. This device proves so effective in eliminating Trojans, spyware and malware including Personal Guard 2009.

Screen Shot Images:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Characteristics (Analysis)
This rogue program will utilized system registry to run itself when Windows starts. It will add the following registry entry to initiate the main executable file:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “personalguard”

Malware Behavior
Personal Guard 2009 employs phony security alerts in order to misinform users. Some of the alerts displays messages similar to this:

All protection modules are turned off. Your PC is currently exposed to viruses, adware and spyware. Turn all modules on to achieve best protection and safety.

Added Registry Entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "personalguard" 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Guard 2009
HKEY_LOCAL_MACHINE\SOFTWARE\Personal Guard 2009

Associated Files and Folders:

C:\Program Files\Personal Guard 2009
C:\Program Files\Personal Guard 2009\config.cnf
C:\Program Files\Personal Guard 2009\mainbase.adb
C:\Program Files\Personal Guard 2009\personalguard.exe
C:\Program Files\Personal Guard 2009\q.adb
C:\Program Files\Personal Guard 2009\queue.vdb
C:\Program Files\Personal Guard 2009\uninstall.exe
C:\Program Files\Personal Guard 2009\virusbase.adb
C:\Program Files\Personal Guard 2009\quarantine 
%UserProfile%\Desktop\Personal Guard 2009.lnk
%UserProfile%\Start Menu\Programs\Personal Guard 2009
%UserProfile%\Start Menu\Programs\Personal Guard 2009\Personal Guard 2009.lnk
%UserProfile%\Start Menu\Programs\Personal Guard 2009\Uninstall.lnk

1. Kill any running process that belongs to Personal Guard 2009.
- Press Ctrl+Alt+Del on your keyboard.
- When Windows Task Manager appears, look for the following files and click End Task.
personalguard.exe

2. Delete all registry entries that belong to this malware.
- Press [Windows Key]+R on your keyboard.
- In the 'Open' dialog box, type regedit. This will open registry editor.
- Find and delete the following:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "personalguard"
- Close registry editor. Changes made will be save automatically.

3. Scan the computer with antivirus program.
- Connect to Internet and open your antivirus software. Please Update to obtain the latest database and necessary files.
- Restart the computer in Safe Mode.
- Just before Windows logo begins to load press F8 on your keyboard.
- On Windows Advanced Boot Options, select Safe Mode and press Enter.

4. Delete all files dropped by Personal Guard 2009.
- While still in Safe Mode, search and delete malicious files. Please refer to 'Associated Files and Folders.'

Automatic Removal of Personal Guard 2009

In order to completely remove the threat, click here to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.