» BitGuard.dll
Overview
Analysis
File Details
Programs (1)

BitGuard.dll

Application Manager

MediaTechSoft Inc.

This is the Performersoft setup installer. The module BitGuard.dll by MediaTechSoft has been detected as adware by 33 anti-malware scanners. The program is a setup application that uses the InstallBrain installer. This file is typically installed with the program BitGuard by MediaTechSoft Inc. which is a potentially unwanted software program. The setup program bundles additional offers, mostly adware, using the InstallBrain installer, a pay-per-install monetization download manager. InstallBrain will also install a background updater service that will update any installed browser add-ons and plug-ins.

File name:

BitGuard.dll

Publisher:

PerformerSoft LLC (signed by MediaTechSoft Inc.)

Product:

Application Manager

Description:

Protector

Version:

2,6,1673,238

MD5:

bca5fa19ce160dca70cd84ba246deb4b

SHA-1:

36ffd3d8f4dd1ef69b0cca94669d821ac551a111

SHA-256:

2721e6cb42ba1fa1fd009a4c6c8bdaf288acc6e89ac8b10c96970c54b4ab5d17

Scanner detections:

33 / 68

Status:

Adware

Explanation:

Uses the InstallBrain monetization platform from iBario to deliver bundled adware both search toolbars and PC optimizers from Performersoft.

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

4/26/2024 1:24:52 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Adware.BHO.Bprotector.1

1133

Agnitum Outpost

Trojan.Adware

7.1.1

AhnLab V3 Security

Malware/Win32.Suspicious

2013.11.26

Avira AntiVirus

APPL/BProtector.2736128

7.11.115.128

avast!

Win32:BProtect-A [PUP]

2014.9-131228

AVG

Bprotect.F

2014.0.3611

Baidu Antivirus

Adware.Win32.bProtector

4.0.3.14120

Bitdefender

Gen:Variant.Adware.BHO.Bprotector.1

1.0.20.1810

Bkav FE

W32.Clod23f.Trojan

1.3.0.4261

Boost by Reason

Optional.MediaTechSoft.I

188838

Clam AntiVirus

Win.Adware.BProtector

0.98/18155

Comodo Security

ApplicUnwnt

17334

Dr.Web

Adware.BGuard.28

9.0.1.0362

Emsisoft Anti-Malware

Gen:Variant.Adware.BHO.Bprotector

8.13.12.28.01

ESET NOD32

Win32/bProtector (variant)

7.8963

Fortinet FortiGate

Adware/Fam.NB

12/28/2013

F-Secure

Gen:Variant.Adware.BHO.Bprotector.1

11.2013-28-12_7

G Data

Gen:Variant.Adware.BHO.Bprotector

13.12.22

K7 AntiVirus

Unwanted-Program

13.174.10306

Kaspersky

HEUR:Trojan.Win32.Generic

14.0.0.4552

Malwarebytes

Trojan.BProtector

v2013.12.28.01

McAfee

Adware-Bprotect

5600.7267

Microsoft Security Essentials

TrojanDropper:Win32/Rotbrow.A

1.163.1557.0

MicroWorld eScan

Gen:Variant.Adware.BHO.Bprotector.1

14.0.0.1086

Quick Heal

TrojanDropper.Rotbrow

12.13.12.00

Reason Heuristics

PUP.MediaTechSoft.I

14.8.8.2

Sophos

BProtector

4.95

Trend Micro House Call

ADW_BITBROWSE

7.2.362

Trend Micro

ADW_BITBROWSE

10.465.28

Vba32 AntiVirus

TrojanDownloader.MultiDL

3.12.24.3

VIPRE Antivirus

InstallBrain

23722

ViRobot

Adware.Agent.2735584

2011.4.7.4223

XVirus List

Win32.Detected

2.8.8

File size:

2.6 MB (2,700,768 bytes)

Product version:

2,6,1673,238

File type:

Dynamic link library (Win32 DLL)

Bundler/Installer:

InstallBrain

Language:

English (United States)

Common path:

C:\ProgramData\bitguard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bitguard.dll

Digital Signature

Signed by:

MediaTechSoft Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

8/4/2013 10:09:22 AM

Valid to:

3/29/2016 7:18:00 PM

Subject:

CN=MediaTechSoft Inc., O=MediaTechSoft Inc., L=Beaverton, S=Oregon, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

047346D0687AB1

File PE Metadata

Compilation timestamp:

9/19/2013 8:51:15 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

10.0

CTPH (ssdeep):

49152:ZUkB9aiDXmuadZYQRfLW+eLH7mq/2TxwcuKw7d+iUWFgv:qkKWmuvIfLGH79s

Entry address:

0x16F958

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, E2, E0, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 14, 56, 8B, 75, 08, 57, 33, FF, 89, 7D, F8, 89, 7D, F4, 89, 7D, FC, 3B, F7, 75, 13, E8, 33, 11, 00, 00, 6A, 16, 5E, 89, 30, E8, 6C, 7F, 00, 00, 8B, C6, EB, 54, 53, 6A, 24, 68, FF, 00, 00, 00, 56, E8, F8, EB, FF, FF, 8B, 5D, 0C, 83, C4, 0C, 3B, DF, 75, 11, E8, 08, 11, 00, 00, 6A, 16, 5E, 89, 30, E8, 41, 7F, 00, 00, EB, 28, 8B, 43, 04, 8B, 0B... 
[+]

Code size:

1.8 MB (1,917,440 bytes)

The file BitGuard.dll has been discovered within the following program.

BitGuard by MediaTechSoft Inc.

BitGuard also known as BProtector, Application Manager and Browser Protector is an application designed to prevent the removal of software installed by the provider and affiliates (including web browser extensions deployed by PerformerSoft).

www.mediatechsoft.com/contact.html

74% remove it

Remove BitGuard.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.