home

USBGuard.exe

USB Disk Security

Lanzhou Itanium Software Technology Co., Ltd.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘USBGuard.exe’. This is installed with USB Disk Security.
Publisher:
Zbshareware Lab  (signed by Lanzhou Itanium Software Technology Co., Ltd.)

Product:
USB Disk Security

Version:
6.4.0.1

MD5:
0ee209370faa94c2267b3b201d31e412

SHA-1:
7786cb0e894d167972cd15184e45bdd795a91073

SHA-256:
8685350be438a18bb883c2a844876913923064b80633e47272df908be12f355c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 7:21:26 AM UTC  (today)

File size:
671.2 KB (687,336 bytes)

Product version:
6.4.0.1

Copyright:
Zbshareware Lab All rights reserved.

Trademarks:
Zbshareware Lab

Original file name:
USBGuard.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\usb disk security\usbguard.exe

Digital Signature
Signed by:
Lanzhou Itanium Software Technology Co., Ltd.

Authority:
COMODO CA Limited

Valid from:
6/13/2013 5:30:00 AM

Valid to:
6/13/2016 5:29:59 AM

Subject:
CN="Lanzhou Itanium Software Technology Co., Ltd.", O="Lanzhou Itanium Software Technology Co., Ltd.", STREET="Qilihe gold Jinhai Garden City Unit 5, Building 2, Room 901", L=Lanzhou, S=Gansu Province, PostalCode=--, C=CN

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
07A02F5A15C92FAEBE1571FB0FC35EDD

File PE Metadata
Compilation timestamp:
6/20/2013 7:57:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:+ZdaNlfM4jLC1IObciTm9En3nbu0QbrPLpwIn+Z037Nyrc9zpzTGVfwOE76AenbB:+ZsNDxEn3S0Qbr1whZ2t1yfUeDR

Entry address:
0x1D7A8

Entry point:
E8, E3, 04, 00, 00, E9, 36, FD, FF, FF, 3B, 0D, 28, D0, 42, 00, 75, 02, F3, C3, E9, 63, 05, 00, 00, 53, 8A, 5C, 24, 08, F6, C3, 02, 56, 8B, F1, 74, 24, 57, 68, 58, DE, 41, 00, 8D, 7E, FC, FF, 37, 6A, 0C, 56, E8, AF, 01, 00, 00, F6, C3, 01, 74, 07, 57, E8, 0C, F8, FF, FF, 59, 8B, C7, 5F, EB, 13, E8, 61, 06, 00, 00, F6, C3, 01, 74, 07, 56, E8, F6, F7, FF, FF, 59, 8B, C6, 5E, 5B, C2, 04, 00, FF, 25, E4, 16, 42, 00, FF, 25, 0C, 17, 42, 00, 6A, 14, 68, 68, 7B, 42, 00, E8, C6, 03, 00, 00, FF, 35, 84, A8, 45, 00...
 
[+]

Entropy:
7.2576

Code size:
128 KB (131,072 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
USBGuard.exe

Command:
"C:\Program Files\usb disk security\usbguard.exe"


3 Startup Files (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
USB Security

Command:
C:\Program Files\usb disk security\usbguard.exe

Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
USB Antivirus

Command:
C:\Program Files\usb disk security\usbguard.exe

Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
USB Disk Security

Command:
C:\Program Files\usb disk security\usbguard.exe


User Start Menu Item
Name:
usbguard.exe


The file USBGuard.exe has been discovered within the following program.

USB Disk Security  by Zbshareware Lab
Publisher's description - “USB Disk Security is the best security software to protect offline computer without the need for signature updates. This light and easy to use solution is compatible with other antivirus software and doesn't slow down your computer at all.”
www.zbshareware.com
11% remove it
 
Powered by Should I Remove It?

Scan USBGuard.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.