» bitguard.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

bitguard.exe

Application Manager

MediaTechSoft Inc.

This is part of a Performersoft product, a 'PC optimzation' application that provides minimal benifits and may have been bundled by a third party installer. The application bitguard.exe by MediaTechSoft has been detected as adware by 31 anti-malware scanners. It runs as a windows Service named “BitGuard”. This file is typically installed with the program BitGuard by MediaTechSoft Inc. which is a potentially unwanted software program. This web browser add-on will claim to protect the web browser but will instead hijack it by modifying the home and search pages.

File name:

bitguard.exe

Publisher:

PerformerSoft LLC (signed by MediaTechSoft Inc.)

Product:

Application Manager

Version:

2,6,1694,246

MD5:

97a57aea49e0ec9d17bdd96a3ceebebc

SHA-1:

0f0492cfaa5d9473d66808d729cd6accef87c8c6

SHA-256:

15806856458aa8ebf4640b6639226c3b39cd9b6009d8dae0742049d0f5e8330c

Scanner detections:

31 / 68

Status:

Adware

Explanation:

This service will prevent resources from modifying the web browser's home and search pages as well as the search provider set by the product, an affiliate search engine partner.

Analysis date:

4/26/2024 11:14:00 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Agnitum Outpost

Trojan.DR.Rotbrow

7.1.1

AhnLab V3 Security

Trojan/Win32.Generic

2013.12.10

Avira AntiVirus

APPL/BProtector.Gen

7.11.118.242

avast!

Win32:BProtect-A [PUP]

2014.9-131130

AVG

Bprotect.C

2014.0.3640

Baidu Antivirus

Adware.Win32.bProtector

4.0.3.14120

Bkav FE

W32.Clod8de.Trojan

1.3.0.4261

Boost by Reason

Optional.Service.MediaTechSoft.I

188838

Clam AntiVirus

Win.Adware.BProtector

0.98/18355

Comodo Security

Application.Win32.Agent.~N

17416

Dr.Web

Adware.BGuard.46

9.0.1.0355

ESET NOD32

Win32/bProtector (variant)

7.9010

Fortinet FortiGate

Adware/Fam.NB

11/30/2013

F-Secure

Application:W32/BProtector.A

11.2013-21-12_7

G Data

Win32.Application.BHO

13.11.22

K7 AntiVirus

Unwanted-Program

13.174.10455

Kaspersky

Trojan.Win32.Bromngr

14.0.0.4554

Malwarebytes

PUP.Optional.PerformerSoft.A

v2013.11.30.06

McAfee

Adware-Bprotect!7F8BECFB26F2

5600.7274

Microsoft Security Essentials

TrojanDropper:Win32/Rotbrow.A

1.163.1557.0

NANO AntiVirus

Trojan.Win32.Bromngr.cqlgre

0.28.0.56692

Panda Antivirus

Trj/dtcontx.I

14.01.20.09

Quick Heal

TrojanDropper.Rotbrow

11.13.12.00

Reason Heuristics

PUP.Service.MediaTechSoft.I

14.8.8.2

Sophos

BProtector

4.95

Trend Micro House Call

ADW_BPROTECT

7.2.334

Trend Micro

ADW_BPROTECT

10.465.30

Vba32 AntiVirus

Trojan.Bromngr

3.12.24.3

VIPRE Antivirus

Trojan.Win32.Generic

24206

ViRobot

Adware.Agent.2864096

2011.4.7.4223

XVirus List

Win.Detected

2.3.31

File size:

2.9 MB (3,032,032 bytes)

Product version:

2,6,1694,246

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\ProgramData\bitguard\2.6.1694.246\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bitguard.exe

Digital Signature

Signed by:

MediaTechSoft Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

8/4/2013 1:39:22 PM

Valid to:

3/29/2016 10:48:00 PM

Subject:

CN=MediaTechSoft Inc., O=MediaTechSoft Inc., L=Beaverton, S=Oregon, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

047346D0687AB1

File PE Metadata

Compilation timestamp:

10/8/2013 5:47:40 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

49152:lo96bY99bha15HQ5LTHDWJabryRi9z8QRmjX97KpTt+FMDVpgeemsrv/eAV4T9Ry:ll29bhWHQ5LGJKyRyIgRmmsL/eAV7

Entry address:

0xECDB7

Entry point:

E8, 25, DF, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 10, 53, 8B, 5D, 08, 56, 85, DB, 74, 11, 83, 7D, 0C, 00, 76, 11, 85, DB, 75, 23, 33, C0, E9, BC, 00, 00, 00, 83, 7D, 0C, 00, 74, EF, E8, E1, 31, 00, 00, 6A, 16, 5E, 89, 30, E8, 5B, 7D, 00, 00, 8B, C6, E9, A0, 00, 00, 00, FF, 75, 0C, 53, E8, 21, DF, FF, FF, 59, 59, 3B, 45, 0C, 72, 05, C6, 03, 00, EB, D5, 57, FF, 75, 10, 8D, 4D, F0, E8, 7A, DB, FF, FF, 80, 3B, 00, 8B, FB, 8B, F3, 74, 63, 8A, 0F, 8B, 55, F4, 0F, B6, C1, 03, C2, 8A, 50, 1D, F6... 
[+]

Entropy:

6.8059

Code size:

1.8 MB (1,918,976 bytes)

Service

Display name:

BitGuard

Type:

Win32ShareProcess

The file bitguard.exe has been discovered within the following program.

BitGuard by MediaTechSoft Inc.

BitGuard also known as BProtector, Application Manager and Browser Protector is an application designed to prevent the removal of software installed by the provider and affiliates (including web browser extensions deployed by PerformerSoft).

www.mediatechsoft.com/contact.html

74% remove it

Remove bitguard.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.