IGuardPC
- Type: Spyware
- Category: Rogue Programs
- Discovered: 12 December 2009
- Removal tools: Malwarebytes' Anti-Malware, Spyware Doctor
1. Introduction
IGuardPC is a fake computer security software, designed to trick user and talk him into dishonest money transfer for faked program license.
User's confusion is achieved by displaying warning messages regarding computer security. Here is an example of Spyware Alert! warning, generated by fake Windows Security Center which is installed along with IGuardPC:
Since IGuardPC simulates anti-virus application, and computer scan is inevitable feature, IGuardPC will imitate computer scan, generating report containing found threats. All virus names in the report are not real, besides, at the time of IGuardPC installation, Windows system directory is supplement by a list of files with random names, which later will be treated as viruses in scan report. These files can not damage the computer and is only used to affect the user.
User's confusion is achieved by displaying warning messages regarding computer security. Here is an example of Spyware Alert! warning, generated by fake Windows Security Center which is installed along with IGuardPC:
- Your computer is infected with spyware. It could damage your critical files or expose your private data on the internet. Click here to register your copy of IGuardPC and remove spyware threats from your PC.
Since IGuardPC simulates anti-virus application, and computer scan is inevitable feature, IGuardPC will imitate computer scan, generating report containing found threats. All virus names in the report are not real, besides, at the time of IGuardPC installation, Windows system directory is supplement by a list of files with random names, which later will be treated as viruses in scan report. These files can not damage the computer and is only used to affect the user.
2. IGuardPC removal tools:
- Malwarebytes' Anti-Malware (for the installation guide click here)
- Spyware Doctor (for the installation guide click here)
3. Screenshot:

4. Hijackthis entries:
O4 - HKCU\..\Run: [IGuardPc.exe] C:\Program Files\IGuardPc Software\IGuardPc\IGuardPc.exe