» bitguard.dll
Overview
Analysis
File Details
Programs (1)

bitguard.dll

Application Manager

MediaTechSoft Inc.

This is part of a Performersoft product, a 'PC optimzation' application that provides minimal benifits and may have been bundled by a third party installer. The module bitguard.dll by MediaTechSoft has been detected as adware by 33 anti-malware scanners. This file is typically installed with the program BitGuard by MediaTechSoft Inc. which is a potentially unwanted software program. It bundles additional offers, mostly adware, using the InstallBrain installer, a pay-per-install monetization download manager. InstallBrain will also install a background updater service that will update any installed browser add-ons and plug-ins.

File name:

bitguard.dll

Publisher:

PerformerSoft LLC (signed by MediaTechSoft Inc.)

Product:

Application Manager

Description:

Protector

Version:

2,6,1694,246

MD5:

2ebbe2521176388c7bc5365e197bf801

SHA-1:

67d9b78889bb81286e94f0c5c8ed2a61157c58c9

SHA-256:

6090c85cf5750e141f2bd6d2334ec0eb79188e2de05de06235726e73c0b0d792

Scanner detections:

33 / 68

Status:

Adware

Explanation:

Uses the InstallBrain monetization platform from iBario to deliver bundled adware both search toolbars and PC optimizers from Performersoft.

Analysis date:

4/25/2024 8:09:20 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Adware.BHO.Bprotector.1

1110

Agnitum Outpost

Trojan.Adware

7.1.1

AhnLab V3 Security

Malware/Win32.Suspicious

2013.11.26

Avira AntiVirus

APPL/BProtector.2736128

7.11.115.128

avast!

Win32:BProtect-A [PUP]

2014.9-131223

AVG

Bprotect.F

2014.0.3617

Baidu Antivirus

Adware.Win32.bProtector

4.0.3.14120

Bitdefender

Gen:Variant.Adware.BHO.Bprotector.1

1.0.20.1785

Bkav FE

W32.Clod23f.Trojan

1.3.0.4261

Boost by Reason

Optional.MediaTechSoft.I

188838

Clam AntiVirus

Win.Adware.BProtector

0.98/18155

Comodo Security

ApplicUnwnt

17334

Dr.Web

Adware.BGuard.28

9.0.1.0357

Emsisoft Anti-Malware

Gen:Variant.Adware.BHO.Bprotector

8.13.12.23.05

ESET NOD32

Win32/bProtector (variant)

7.8963

Fortinet FortiGate

Adware/Fam.NB

12/23/2013

F-Secure

Gen:Variant.Adware.BHO.Bprotector.1

11.2013-23-12_2

G Data

Gen:Variant.Adware.BHO.Bprotector

13.12.22

K7 AntiVirus

Unwanted-Program

13.174.10306

Kaspersky

HEUR:Trojan.Win32.Generic

14.0.0.4579

Malwarebytes

Trojan.BProtector

v2013.12.23.05

McAfee

Adware-Bprotect

5600.7273

Microsoft Security Essentials

TrojanDropper:Win32/Rotbrow.A

1.163.1557.0

MicroWorld eScan

Gen:Variant.Adware.BHO.Bprotector.1

14.0.0.1071

Quick Heal

TrojanDropper.Rotbrow

12.13.12.00

Reason Heuristics

PUP.MediaTechSoft.I

14.8.8.2

Sophos

BProtector

4.95

Trend Micro House Call

ADW_BITBROWSE

7.2.357

Trend Micro

ADW_BITBROWSE

10.465.23

Vba32 AntiVirus

TrojanDownloader.MultiDL

3.12.24.3

VIPRE Antivirus

InstallBrain

23722

ViRobot

Adware.Agent.2735584

2011.4.7.4223

XVirus List

Win32.Detected

2.8.8

File size:

2.6 MB (2,704,352 bytes)

Product version:

2,6,1694,246

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\ProgramData\bitguard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\bitguard.dll

Digital Signature

Signed by:

MediaTechSoft Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

8/4/2013 3:09:22 PM

Valid to:

3/30/2016 12:18:00 AM

Subject:

CN=MediaTechSoft Inc., O=MediaTechSoft Inc., L=Beaverton, S=Oregon, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

047346D0687AB1

File PE Metadata

Compilation timestamp:

9/23/2013 6:55:42 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

10.0

CTPH (ssdeep):

49152:p9reT5I+6hv9vuqidkiGiowUva8gCwF+KbffTdjvbMLIE7P4kFZL:L+p6hHSBopva/CwFK

Entry address:

0x16FCB8

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, E2, E0, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 14, 56, 8B, 75, 08, 57, 33, FF, 89, 7D, F8, 89, 7D, F4, 89, 7D, FC, 3B, F7, 75, 13, E8, 33, 11, 00, 00, 6A, 16, 5E, 89, 30, E8, 69, 7F, 00, 00, 8B, C6, EB, 54, 53, 6A, 24, 68, FF, 00, 00, 00, 56, E8, F8, EB, FF, FF, 8B, 5D, 0C, 83, C4, 0C, 3B, DF, 75, 11, E8, 08, 11, 00, 00, 6A, 16, 5E, 89, 30, E8, 3E, 7F, 00, 00, EB, 28, 8B, 43, 04, 8B, 0B... 
[+]

Entropy:

6.7069

Code size:

1.8 MB (1,919,488 bytes)

The file bitguard.dll has been discovered within the following program.

BitGuard by MediaTechSoft Inc.

BitGuard also known as BProtector, Application Manager and Browser Protector is an application designed to prevent the removal of software installed by the provider and affiliates (including web browser extensions deployed by PerformerSoft).

www.mediatechsoft.com/contact.html

74% remove it

Remove bitguard.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.