How to remove XLG Guarder Privacy Control Center

XLG Guarder is a rogue security software, it is a false anti-spyware application that is generally installed in the user’s computer by dangerous trojans (such as Zlob and false video codecs), but it can also be installed manually by the victim.

Once your computer is infected with this parasite, it will immediately displays security warnings, alerts and system scans stating that your computer is heavily infected. These warnings are all false and are only displayed to make you think your computer is truly infected and that it is necessary to buy the full version of the software to remove the so-called infections.

Make sure to not fall in this scam, if your computer is infected with XLG Guarder, it is recommended to remove it immediately and to scan your system with a real security software.

Symptoms of infection

  • The process XP-Shield.exe is running in your system
  • Slow computer performance
  • Repeated security warnings, alerts and system scans
  • Web sites that suddenly are shown on your desktop

Malicious web sites and urls:

1
2
tubezzz.com/xxx/
213.174.137.3/handlers/software_response.php

Internet traffic on port 80:

1
2
3
4
5
6
7
8
9
10
GET /handlers/software_response.php?uid=11 HTTP/1.1
Content-Type: text/html
Host: 213.174.137.3
User-Agent: Mozilla 3.0 (compatible; Indy Library)
 
HTTP/1.1 200 OK
Date: Wed, 17 Dec 2008 15:08:20 GMT
Server: Apache/1.3.41 (Unix) PHP/5.2.6
X-Powered-By: PHP/5.2.6
0

When the program is executed, it creates the following files:

1
2
3
C:\Program Files\xscan\
C:\Program Files\xscan\xscan.exe
C:\Program Files\xscan\xmon.exe

The program creates the following registry entries:

1
2
3
4
5
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\XLG Guarder
HKCU\Software\xscan
HKCU\Software\XLG Guarder
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\XLG Guarder
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\xmon

How to remove XLG Guarder (manual removal) ?

  • Kill the running process xmon.exe
  • Kill the running process xscan.exe
  • Unregister all the XLG Guarder DLLs
  • Delete all the XLG Guarder files
  • Delete all the XLG Guarder registry entries

How to remove XLG Guarder (automatic removal) ?

Random Posts

Previous Posts