home

bitguard.exe

Application Manager

MediaTechSoft Inc.

This is the Performersoft setup installer. The application bitguard.exe by MediaTechSoft has been detected as adware by 31 anti-malware scanners. The program is a setup application that uses the InstallBrain installer. It runs as a windows Service named “BitGuard”. This is the uninstaller utility registered in the Windows Control Panel for the program BitGuard by MediaTechSoft Inc.. This file is typically installed with the program BitGuard by MediaTechSoft Inc. which is a potentially unwanted software program. This web browser add-on will claim to protect the web browser but will instead hijack it by modifying the home and search pages.
Publisher:
PerformerSoft LLC  (signed by MediaTechSoft Inc.)

Product:
Application Manager

Version:
2,6,1673,238

MD5:
7f8becfb26f2655e281406c6c341f416

SHA-1:
a565b44a687c8e7050692c9249d56eb7711945b4

SHA-256:
9d5fb2bac4bd9c579c5be6ef12ee916b2f029d49ab42a312a0007ee636d414bd

Scanner detections:
31 / 68

Status:
Adware

Explanation:
This service will prevent resources from modifying the web browser's home and search pages as well as the search provider set by the product, an affiliate search engine partner.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
4/19/2024 4:56:14 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.DR.Rotbrow
7.1.1

AhnLab V3 Security
Trojan/Win32.Generic
2013.12.10

Avira AntiVirus
APPL/BProtector.Gen
7.11.118.242

avast!
Win32:BProtect-A [PUP]
2014.9-131218

AVG
Bprotect.C
2014.0.3621

Baidu Antivirus
Adware.Win32.bProtector
4.0.3.14120

Bkav FE
W32.Clod8de.Trojan
1.3.0.4261

Boost by Reason
Optional.Service.MediaTechSoft.I
188838

Clam AntiVirus
Win.Adware.BProtector
0.98/18355

Comodo Security
Application.Win32.Agent.~N
17416

Dr.Web
Adware.BGuard.46
9.0.1.0352

ESET NOD32
Win32/bProtector (variant)
7.9153

Fortinet FortiGate
Adware/Fam.NB
12/24/2013

F-Secure
Application:W32/BProtector.A
11.2013-18-12_4

G Data
Win32.Application.BHO
13.12.22

K7 AntiVirus
Unwanted-Program
13.174.10455

Kaspersky
Trojan.Win32.Bromngr
14.0.0.4602

Malwarebytes
PUP.Optional.PerformerSoft.A
v2013.12.18.03

McAfee
Adware-Bprotect!7F8BECFB26F2
5600.7277

Microsoft Security Essentials
TrojanDropper:Win32/Rotbrow.A
1.163.1557.0

NANO AntiVirus
Trojan.Win32.Bromngr.cqlgre
0.28.0.56692

Panda Antivirus
Trj/dtcontx.I
14.01.04.09

Quick Heal
TrojanDropper.Rotbrow
12.13.12.00

Reason Heuristics
PUP.Service.MediaTechSoft.I
14.8.8.2

Sophos
BProtector
4.95

Trend Micro House Call
ADW_BPROTECT
7.2.352

Trend Micro
ADW_BPROTECT
10.465.18

Vba32 AntiVirus
Trojan.Bromngr
3.12.24.3

VIPRE Antivirus
Trojan.Win32.Generic
24206

ViRobot
Adware.Agent.2864096
2011.4.7.4223

XVirus List
Win.Detected
2.3.31

File size:
2.9 MB (3,029,472 bytes)

Product version:
2,6,1673,238

Copyright:
Copyright (C) 2012

File type:
Executable application (Win32 EXE)

Bundler/Installer:
InstallBrain

Language:
English (United States)

Common path:
C:\ProgramData\bitguard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bitguard.exe

Digital Signature
Signed by:
MediaTechSoft Inc.

Authority:
GoDaddy.com, Inc.

Valid from:
8/4/2013 10:09:22 AM

Valid to:
3/29/2016 7:18:00 PM

Subject:
CN=MediaTechSoft Inc., O=MediaTechSoft Inc., L=Beaverton, S=Oregon, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
047346D0687AB1

File PE Metadata
Compilation timestamp:
9/13/2013 5:01:53 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:aDZ6WoigGWA7fsqInYma2V/Ci/mdUq8LcLcvTFE9NNseCm3v/eAWthY8O:e6CDW6sqInYeci/dLcH+m//eAWts

Entry address:
0xECC47

Entry point:
E8, 25, DF, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 10, 53, 8B, 5D, 08, 56, 85, DB, 74, 11, 83, 7D, 0C, 00, 76, 11, 85, DB, 75, 23, 33, C0, E9, BC, 00, 00, 00, 83, 7D, 0C, 00, 74, EF, E8, E1, 31, 00, 00, 6A, 16, 5E, 89, 30, E8, 5B, 7D, 00, 00, 8B, C6, E9, A0, 00, 00, 00, FF, 75, 0C, 53, E8, 21, DF, FF, FF, 59, 59, 3B, 45, 0C, 72, 05, C6, 03, 00, EB, D5, 57, FF, 75, 10, 8D, 4D, F0, E8, 7A, DB, FF, FF, 80, 3B, 00, 8B, FB, 8B, F3, 74, 63, 8A, 0F, 8B, 55, F4, 0F, B6, C1, 03, C2, 8A, 50, 1D, F6...
 
[+]

Code size:
1.8 MB (1,918,464 bytes)

Program Uninstaller
Program name:
BitGuard

Display publisher:
MediaTechSoft Inc.

Uninstall string:
"C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe" /Uninstall /{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} /um


Service
Display name:
BitGuard

Type:
Win32ShareProcess


The file bitguard.exe has been discovered within the following program.

BitGuard  by MediaTechSoft Inc.
BitGuard also known as BProtector, Application Manager and Browser Protector is an application designed to prevent the removal of software installed by the provider and affiliates (including web browser extensions deployed by PerformerSoft).
www.mediatechsoft.com/contact.html
74% remove it
 
Powered by Should I Remove It?

Remove bitguard.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.