Drivegaurd.exe or flashgaurd.exe
“this worm will remove all files from C:heap41a that are related to other malicious programs it enables TaskManager if is disabled” – BitDefender
But it’ll also download some other malicious files to your computer so it is recommended to trmove this trojan /virus asap.
You can locate the virus files at c:Program FilesFlashGuardFlashGuard.exe
Or you may have to change the attributes of this folder.For that you can refer this guide
c:Program FilesFlashGuardFlashGuard.exe
c:Program FilesFlashGuardReadMe.txt
c:DocumentsandSettings**UserProfileLocalSettingsTempDriveGuard.tmp.exe
c:DocumentsandSettings**UserProfileLocalSettingsTempgHmpg.tmp.exe
It creates folders in your pendrive & copy itself to :
f:SystemSecurityDriveGuard.exe *
f:autorun.inf *
f: is your pen drive so change it according to your pendrive drive.
Will add itself to startup:
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunFlashGuard
To see these virus you must set Windows to show hidden files -
Removal Guide :
Press Ctrl+Alt+Del to open ‘Task Manager’, select FlashGuard.exe & click ‘End Process’
You can browse to the folder mentioned above or you can find it quickly by using ‘Search’ feature(Start Menu>>Search). In the search box type, flashguard.exe or flashguard. Don’t hit the search button ..
Scroll down & expand ‘More Advanced Options’.Check the all the box as you see in the screenshot below & hit ‘Search’ button..
Delete all the files found..
Also serch for .tmp.exe, delete DriveGuard.tmp.exe & gHmpg.tmp.exe files…
The virus files can easily be recognized with pendrive icon and delete those files.
Congrats, the virus is removed from your computer. But still some entries made by the virus files exists in registry.
Go to start->run and type msconfig and hit enter
Select ‘Startup’ tab, select & uncheck FlashGuard. Click ‘Apply’.
Delete Registry Entry : Go to Start Menu>>Run, type regedit & click ‘Ok’
Browse to :
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunFlashGuard
Select FlashGuard, right-click on it & delete..
BAS
ENJOY
Incoming search terms for the article:
- driveguard,flashguard exe,www 9348 cn,remove driveguard,virus www 9348 cn,remove www 9348 cn,how to remove www 9348 cn,how to remove flashguard exe,how to remove driveguard,cache:y4o1Xh1X1ZIJ:tipsfromgeek com/2008/11/how-toview-hidden-system-files-and-foldersunhide-hidden-virus-files html how to access to nokia through cmd,FlashGuard,exista picjoke pe anul 2008,DriveMonitor hklm,driveguard exe,dileep 12345,cache:y4o1Xh1X1ZIJ:tipsfromgeek com/2008/11/how-toview-hidden-system-files-and-foldersunhide-hidden-virus-files html system attribute virus hidden,www 9348 cn spyware virus removal
Related posts:
- How to remove new folder.exe virus from pendrive
- [HOW TO]Remove AMVO.EXE virus
- How to remove recycler.exe virus from Pen Drive
- [HOW TO]Remove virus Hacked by GodZilla
- [HOW TO]Remove NTDETEC1.exe
- [HOW TO] Remove win32.zafi.b Virus/Adware
- [HOW TO]Remove AntiVirGear/AntiVir Gear virus/adware
- double click on drive shows open with
- [HOW TO] Remove Total Security 2009 virus/adware
- How To Remove W32.sillyFDC Virus|W32.sillyFDC Virus removal

f:\System\Security\DriveGuard.exe *
f:\autorun.inf *
these files are in my friend’s pen drive. how can i remove these from my system.. my system dont have these files..
c:\Program Files\FlashGuard\FlashGuard.exe
c:\Program Files\FlashGuard\ReadMe.txt
c:\DocumentsandSettings\**UserProfile\LocalSettings\Temp\DriveGuard.tmp.exe
c:\DocumentsandSettings\**UserProfile\LocalSettings\Temp\gHmpg.tmp.exe
thanks