GuardPcs
- Type: Spyware
- Category: Rogue Programs
- Discovered: 15 December 2009
- Removal tools: Malwarebytes' Anti-Malware, Spyware Doctor
1. Introduction
GuardPcs is a misleading computer program, in some cases may be incorrectly referred to as a virus. Since GuardPcs is not a virus, it does not have the reproductive ability, but may cause illegal money transaction and even private data theft.
Most misleading programs (GuardPcs is not excluded) has a Trojan horse component, through which user is mislead to install rogue program. Furthermore, during installation, a number of files will be dropped in Windows system directory, so that later they could be detected and treated as viruses. The name of each dropped file is indefinite - scattered sequence of numbers and letters. Here is an example of such file names:
The essential feature of all misleading applications - a large amount of warning messages that alert user about computer security breaches and lead to rogue program purchase. Such messages usually carry false content, stating that the computer is infected with a viruses. In this case, acting on any of those messages, GuardPcs will be suggested as anti-virus tool, which has to be purchased in order to activate removal function.
GuardPcs licensed version is useless, accordingly, cash transfers are worthless. GuardPcs is not capable to remove computer viruses and other threats, even after the purchase.
Most misleading programs (GuardPcs is not excluded) has a Trojan horse component, through which user is mislead to install rogue program. Furthermore, during installation, a number of files will be dropped in Windows system directory, so that later they could be detected and treated as viruses. The name of each dropped file is indefinite - scattered sequence of numbers and letters. Here is an example of such file names:
- 4d9fzparse25959.cpl
- 4d90downlo5dzr2444.bin
The essential feature of all misleading applications - a large amount of warning messages that alert user about computer security breaches and lead to rogue program purchase. Such messages usually carry false content, stating that the computer is infected with a viruses. In this case, acting on any of those messages, GuardPcs will be suggested as anti-virus tool, which has to be purchased in order to activate removal function.
GuardPcs licensed version is useless, accordingly, cash transfers are worthless. GuardPcs is not capable to remove computer viruses and other threats, even after the purchase.
2. GuardPcs removal tools:
- Malwarebytes' Anti-Malware (for the installation guide click here)
- Spyware Doctor (for the installation guide click here)
3. Screenshot:

4. GuardPcs files:
C:\Program Files\GuardPcs Software\GuardPcs\GuardPcs.exe
C:\Program Files\GuardPcs Software\GuardPcs\uninstall.exe
5. Hijackthis entries:
O4 - HKCU\..\Run: [GuardPcs.exe] C:\Program Files\GuardPcs Software\GuardPcs\GuardPcs.exe