Drivegaurd.exe or flashgaurd.exe virus details

Drivegaurd.exe or flashgaurd.exe


“this worm will remove all files from C:\heap41a that are related to other malicious programs it enables TaskManager if is disabled” - BitDefender


But it’ll also download some other malicious files to your computer so it is recommended to trmove this trojan /virus asap.
You can locate the virus files at c:\Program Files\FlashGuard\FlashGuard.exe
Or you may have to change the attributes of this folder.For that you can refer this guide

c:\Program Files\FlashGuard\FlashGuard.exe
c:\Program Files\FlashGuard\ReadMe.txt
c:\DocumentsandSettings\**UserProfile\LocalSettings\Temp\DriveGuard.tmp.exe
c:\DocumentsandSettings\**UserProfile\LocalSettings\Temp\gHmpg.tmp.exe
It creates folders in your pendrive & copy itself to :
f:\System\Security\DriveGuard.exe *
f:\autorun.inf *
f: is your pen drive so change it according to your pendrive drive.
Will add itself to startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\FlashGuard
To see these virus you must set Windows to show hidden files -
Removal Guide :
Press Ctrl+Alt+Del to open ‘Task Manager’, select FlashGuard.exe & click ‘End Process’
You can browse to the folder mentioned above or you can find it quickly by using ‘Search’ feature(Start Menu>>Search). In the search box type, flashguard.exe or flashguard. Don’t hit the search button ..


Scroll down & expand ‘More Advanced Options’.Check the all the box as you see in the screenshot below & hit ‘Search’ button..
Delete all the files found..
Also serch for .tmp.exe, delete DriveGuard.tmp.exe & gHmpg.tmp.exe files…
The virus files can easily be recognized with pendrive icon and delete those files.
Congrats, the virus is removed from your computer. But still some entries made by the virus files exists in registry.
Go to start->run and type msconfig and hit enter
Select ‘Startup’ tab, select & uncheck FlashGuard. Click ‘Apply’.

Delete Registry Entry : Go to Start Menu>>Run, type regedit & click ‘Ok’
Browse to :
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\FlashGuard
Select FlashGuard, right-click on it & delete..

Comments

Post a Comment

Popular posts from this blog

HOW TO CRACK WINRAR USING OLLYDBG

Winrar always show us a reminder saying “Please purchase Winrar licence” at the every startup of winrar, it’s irritating. It notify our trial/ evaluation period. It can be patch using ollydbg. I will tell u how.   Open ollydbg and open winrar in it. Now search for text string. “Reminder”. To do so right click in olldbg and search for All referenced text sting. A new window [Text strings referenced in winRAR::text] will open, right click on in that and click Search for text .Now a search box open enter reminder there. Now that we got that code that display REMINDER, double click on that it will take u to the mian program code. Now look for jump just before the code starts. There is jump JE SHORT 00441219,if we follow the jump lets see where it goes, to do this simply press Enter on the jump. Lets change jump from JE SHORT 00441219 to JMP SHORT 00441219 so that it noe becomes JUMP instead of JUMP EQUAL. To do that double click on that statement and change it. Then click Assembl
Read more

Bluetooth Bluejack

Bluetooth technology operates by using low-power radio waves, communicating on a frequency of 2.45 gigahertz. This special frequency is also known as the ISM band, an open, unlicensed band set aside for industrial, scientific and medical devices. When a number of Bluetooth devices are switched on in the same area, they all share the same ISM band and can locate and communicate with each other, much like a pair of walkies talkies tuned to the same frequency are able to link up. Bluetooth technology users take advantage of this ability to network with other phone and can send text messages or electronic business cards to each other. To send information to another party, the user creates a personal contact name in his or her phone's address book -- the name can be anything from the sender's actual name to a clever nickname. Bluejackers have devised a simple technique to surprise their victims: Instead of creating a legitimate name in the address book, the bluejacker's me
Read more

Hacking Attacks

Computer connected to internet are vulnerable top variety of exploits.System can be subjected to denial of service attacks that prevent other computers from connecting to them or prevent others computer from connecting to other computers on the internet.These attacks can cause them to cease operations either temporarily or permanently. Some of these attacks use vulnerability available in the third party components used by websites, such as shopping cart software.Other attacks have used vulnerabilities which are common in any web application such as SQL injection or XSS(Cross Site Scripting). Types of Attack There are two types of attack: Non technical attack Social Engineering attack Pretexting Phishing Smishing Vishing Tabnabbing Technical Attack DOS attack  Input Validation Attack Keyloggers Attack Sniffing Attack
Read more