Associated Malware Groups
The filename is associated with the malware group:
File Behavior
XDGWSYSGUARD.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Adds products to the system registry
- Executes a Process
- Can communicate with other computer systems using HTTP protocols
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Modifies the Windows Host File which could be used to stop you visiting specific web sites by redirecting you to alternative addresses without you knowing
- This Process Deletes Other Processes From Disk
- This process creates other processes on disk
XDGWSYSGUARD.EXE has been the subject of the following behavior:
- Created as a process on disk
- Executed by Internet Explorer
- Deleted as a process from disk
- Added as a Registry auto start to load Program on Boot up
- Executed as a Process
- Has code inserted into its Virtual Memory space by other programs
Country Of Origin
The filename XDGWSYSGUARD.EXE was first seen on Nov 1 2009 in the following geographical regions of the Prevx community:
- The UNITED STATES on Nov 1 2009
- The EUROPEAN UNION on Nov 1 2009
File Name Aliases
XDGWSYSGUARD.EXE can also use the following file names:
- BJPNSYSGUARD.EXE
- UOJVSYSGUARD.EXE
- OEAVSYSGUARD.EXE
- VCPHSYSGUARD.EXE
- OONMSYSGUARD.EXE
- OJJESYSGUARD.EXE
- 0.2617170790406912.EXE
- 0.4580088376132595.EXE
- 0.2239817713224197.EXE
Filesizes
This file has been seen with the following file size:
File Type
The filename XDGWSYSGUARD.EXE refers to an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.