Rogue software details: PC-Guide

PC-Guide is a rogue security application. In order to remove it, find out what files and registry entries to look for below.

Known system changes:

Files
c:\ProgramFiles\PcGuide\PcGuide.exe
c:\ProgramFiles\PcGuide\PcGuideUpdater.exe

Folders
c:\ProgramFiles\PcGuide
c:\StartMenu\Programs\PcGuide

Registry entries
Key: HKEY_CURRENT_USER\Software\PcGuide
Key: HKEY_CLASSES_ROOT\CLSID\{EEF61581-FD93-
4fac-A44B-7A7C9EE5EED8}
Key: HKEY_CLASSES_ROOT\Interface\{693D7386-E06D-
43E7-957F-0EA6C3F67CFD}
Key: HKEY_CLASSES_ROOT\SSBHO.PGBLKBHO
Key: HKEY_CLASSES_ROOT\SSBHO.PGBLKBHO.1
Key: HKEY_CLASSES_ROOT\TypeLib\{268FE4EC-54EA-
400C-B95C-D61234493028}
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Explorer\Browser Helper Objects\{EEF61581-FD93-4fac-A44B-
7A7C9EE5EED8}
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Uninstall\PcGuide
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run
Value: PcGuide
Data: “C:\Program Files\PcGuide\PcGuideUpdater.exe”

Source: Lavasoft Malware Lab’s Rogue Gallery.




Share this