Tuesday, March 2, 2010

Webguard32.exe Virus

Webguard32.exe writes another process's virtual memory and executes a process. My anti-virus cannot remove this virus. It creates an autorun.inf files which executes to a hard drive and flash drive. I tried to remove it manually but it doesn't work.

WEBGUARD32.EXE can also use the following file names:

  • MSMXENG.EXE
  • S52[1].EXE
  • S727[1].EXE
  • S721[1].EXE
  • 063.EXE
  • 762.EXE
  • 705.EXE
  • 828.EXE
So far, no threads, forum and information for this kind of malware.

0 comments: