» BitGuard.dll
Overview
Analysis
File Details
Programs (1)

BitGuard.dll

Application Manager

MediaTechSoft Inc.

This is the Performersoft setup installer. The module BitGuard.dll by MediaTechSoft has been detected as adware by 33 anti-malware scanners. The program is a setup application that uses the InstallBrain installer. This file is typically installed with the program BitGuard by MediaTechSoft Inc. which is a potentially unwanted software program. The setup program bundles additional offers, mostly adware, using the InstallBrain installer, a pay-per-install monetization download manager. InstallBrain will also install a background updater service that will update any installed browser add-ons and plug-ins.

File name:

BitGuard.dll

Publisher:

PerformerSoft LLC (signed by MediaTechSoft Inc.)

Product:

Application Manager

Description:

Protector

Version:

2,6,1673,238

MD5:

4708cbd3a820f48fa5e390c9211971b5

SHA-1:

ba760a4e1e5afcd66160648e99fc57ec3c01443a

SHA-256:

b3b132f86ebfe6976a483917caa93d467255418142f9b545e40149a1422eec00

Scanner detections:

33 / 68

Status:

Adware

Explanation:

Uses the InstallBrain monetization platform from iBario to deliver bundled adware both search toolbars and PC optimizers from Performersoft.

Description:

This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:

4/26/2024 8:30:04 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Adware.BHO.Bprotector.1

1127

Agnitum Outpost

Trojan.Adware

7.1.1

AhnLab V3 Security

Malware/Win32.Suspicious

2013.11.26

Avira AntiVirus

APPL/BProtector.2736128

7.11.115.128

avast!

Win32:BProtect-A [PUP]

2014.9-131218

AVG

Bprotect.F

2014.0.3621

Baidu Antivirus

Adware.Win32.bProtector

4.0.3.14120

Bitdefender

Gen:Variant.Adware.BHO.Bprotector.1

1.0.20.1760

Bkav FE

W32.Clod23f.Trojan

1.3.0.4261

Boost by Reason

Optional.MediaTechSoft.I

188838

Clam AntiVirus

Win.Adware.BProtector

0.98/18155

Comodo Security

ApplicUnwnt

17334

Dr.Web

Adware.BGuard.28

9.0.1.0352

Emsisoft Anti-Malware

Gen:Variant.Adware.BHO.Bprotector

8.13.12.18.03

ESET NOD32

Win32/bProtector (variant)

7.8963

Fortinet FortiGate

Adware/Fam.NB

12/18/2013

F-Secure

Gen:Variant.Adware.BHO.Bprotector.1

11.2013-18-12_4

G Data

Gen:Variant.Adware.BHO.Bprotector

13.12.22

K7 AntiVirus

Unwanted-Program

13.174.10306

Kaspersky

HEUR:Trojan.Win32.Generic

14.0.0.4602

Malwarebytes

Trojan.BProtector

v2013.12.18.03

McAfee

Adware-Bprotect

5600.7277

Microsoft Security Essentials

TrojanDropper:Win32/Rotbrow.A

1.163.1557.0

MicroWorld eScan

Gen:Variant.Adware.BHO.Bprotector.1

14.0.0.1056

Quick Heal

TrojanDropper.Rotbrow

12.13.12.00

Reason Heuristics

PUP.MediaTechSoft.I

14.8.8.2

Sophos

BProtector

4.95

Trend Micro House Call

ADW_BITBROWSE

7.2.352

Trend Micro

ADW_BITBROWSE

10.465.18

Vba32 AntiVirus

TrojanDownloader.MultiDL

3.12.24.3

VIPRE Antivirus

InstallBrain

23722

ViRobot

Adware.Agent.2735584

2011.4.7.4223

XVirus List

Win32.Detected

2.8.8

File size:

2.6 MB (2,700,768 bytes)

Product version:

2,6,1673,238

File type:

Dynamic link library (Win32 DLL)

Bundler/Installer:

InstallBrain

Language:

English (United States)

Common path:

C:\ProgramData\bitguard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bitguard.dll

Digital Signature

Signed by:

MediaTechSoft Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

8/4/2013 10:09:22 AM

Valid to:

3/29/2016 7:18:00 PM

Subject:

CN=MediaTechSoft Inc., O=MediaTechSoft Inc., L=Beaverton, S=Oregon, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

047346D0687AB1

File PE Metadata

Compilation timestamp:

9/13/2013 5:00:29 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

10.0

CTPH (ssdeep):

49152:u+cZPaiDXmuadZvdRfLW2G7H7fnHlTegcLuh7dR9qiM+z:JcYWmuQLfLmH7LD

Entry address:

0x16F958

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, E2, E0, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 14, 56, 8B, 75, 08, 57, 33, FF, 89, 7D, F8, 89, 7D, F4, 89, 7D, FC, 3B, F7, 75, 13, E8, 33, 11, 00, 00, 6A, 16, 5E, 89, 30, E8, 6C, 7F, 00, 00, 8B, C6, EB, 54, 53, 6A, 24, 68, FF, 00, 00, 00, 56, E8, F8, EB, FF, FF, 8B, 5D, 0C, 83, C4, 0C, 3B, DF, 75, 11, E8, 08, 11, 00, 00, 6A, 16, 5E, 89, 30, E8, 41, 7F, 00, 00, EB, 28, 8B, 43, 04, 8B, 0B... 
[+]

Code size:

1.8 MB (1,917,440 bytes)

The file BitGuard.dll has been discovered within the following program.

BitGuard by MediaTechSoft Inc.

BitGuard also known as BProtector, Application Manager and Browser Protector is an application designed to prevent the removal of software installed by the provider and affiliates (including web browser extensions deployed by PerformerSoft).

www.mediatechsoft.com/contact.html

74% remove it

Remove BitGuard.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.