How to remove “Rogue.ErrorGuard”?

The Rogue.ErrorGuard is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Rogue.ErrorGuard virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
Reads data out of its own binary image
Authenticode signature is invalid
Attempts to modify proxy settings
Harvests cookies for information gathering

How to determine Rogue.ErrorGuard?


File Info:
name: AFD7B79FA300C2DE7DC1.mlw
path: /opt/CAPEv2/storage/binaries/0b22952b688fd45b6f6378d9683b5bd9fd1b1bc3f5e90828b3f8dae65a94cae9
crc32: B7510F70
md5: afd7b79fa300c2de7dc1a0fc9d57ec21
sha1: b1f57f50a3d32c2cc963b55089e90f1890039fc6
sha256: 0b22952b688fd45b6f6378d9683b5bd9fd1b1bc3f5e90828b3f8dae65a94cae9
sha512: 700f735483aeeaf7a702277aecc6ce597e453c122633cbded7f35dd8f728a6753429e3e2f90963b2c6c81aa70a45d346a6292a239deba51793031119a50ded56
ssdeep: 3072:SgyjKBJYU48LTNm8UVaBw06IDupafBc6I8uwVo2UkDqveeDb:SQ3W/KzIZeGb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E7E301666BD4D4BBC46609310993B3B5EBB38E191332E14737449FBFAD350C3AC1A296
sha3_384: ff5024d6162195e07aab23d77a685cc49b72a7bb4f7206d02eb5a5109b82ad9078ae87afbcfc1dc4c49fbb2ca3fedb32
ep_bytes: 83ec0c53555657c7442410e891400033
timestamp: 2004-02-07 17:26:28

Version Info:
0: [No Data]

Rogue.ErrorGuard also known as:

Lionic	Trojan.Multi.Generic.4!c
FireEye	Application.ErrorGuard.A
McAfee	ErrorGuard.dr
Cylance	Unsafe
Sangfor	PUP.Win32.ErrorGuard.A
Alibaba	AdWare:Win32/ErrorGuard.3e451b1a
Cyren	W32/Backdoor.SIOM-2264
Symantec	SecurityRisk.gen1
TrendMicro-HouseCall	Freeloader_ErrorGuard
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Application.ErrorGuard.A
NANO-Antivirus	Trojan.Win32.ErrorGuard.qmgoq
MicroWorld-eScan	Application.ErrorGuard.A
Emsisoft	Application.ErrorGuard.A (B)
Comodo	ApplicUnwnt@#123r2l32iw3mi
VIPRE	ErrorGuard
TrendMicro	Freeloader_ErrorGuard
McAfee-GW-Edition	ErrorGuard.dr
Sophos	ErrorGuard Installer (PUA)
MAX	malware (ai score=98)
Kingsoft	Win32.Troj.ErrorGuard.(kcloud)
Microsoft	Trojan:Win32/Occamy.C0B
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Application.ErrorGuard.A
ALYac	Application.ErrorGuard.A
VBA32	suspected of Trojan.Downloader.gen
Malwarebytes	Rogue.ErrorGuard
Rising	Trojan.ScrInject!8.A (TOPIS:E1:judDsRr3E0V)
Fortinet	Riskware/ErrorGuard
Webroot	W32.Malware.Gen
Cybereason	malicious.fa300c
Panda	Application/ErrorGuard

How to remove Rogue.ErrorGuard?

Rogue.ErrorGuard removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X