IGuardPC

IGuardPC dossier — a late-2009 WiniGuard-family rogue clone, with the install paths and registry keys observed in the wild.

IGuardPC is a rogue security product in the WiniGuard family — one of the many rebrands that appeared in late 2009. Contemporary notes treated it as roughly the 50th clone in that line (The biggest rogue family).

Like other family members, it presents fake infection results and pushes a paid unlock. Do not purchase it; follow the Malware Removal guide for Windows.

Known System Changes

Files

  • %CommonDesktop%\IGuardPc.lnk
  • %ProgramFiles%\IGuardPc Software\IGuardPc\IGuardPc.exe

Folders

  • %CommonPrograms%\IGuardPc
  • %ProgramFiles%\IGuardPc Software

Registry Entries

  • Key: HKEY_CURRENT_USER\Software\IGuardPc
  • Key: HKEY_LOCAL_MACHINE\Software\IGuardPc
  • Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IGuardPc
  • Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
  • Value: IGuardPc.exe

Search