Should I block it?

98%
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization

VersionsAdditional versions

2,6,1694,246 37.50%
2,6,1694,246 18.75%
2,6,1694,246 6.25%
2,6,1673,238 31.25%
2,6,1673,238 6.25%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
AddAce, ReportEventA, DeregisterEventSource, RegEnumKeyW, RegEnumValueW, RegEnumKeyExW, RegNotifyChangeKeyValue, RegDeleteKeyW, RegCreateKeyExW, RegSetValueExW, RegDeleteValueW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, ConvertStringSecurityDescriptorToSecurityDescriptorA, GetSecurityDescriptorSacl, SetSecurityDescriptorSacl, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, SetSecurityInfo, DeleteAce, GetAce, GetAclInformation, GetSecurityInfo, OpenProcessToken, OpenThreadToken, GetTokenInformation, InitializeAcl, GetLengthSid, RegisterEventSourceA
imagehlp.dll
ImageDirectoryEntryToData
kernel32.dll
DllMain
ole32.dll
CoInitialize, CoUninitialize, CoCreateInstance, CLSIDFromString
psapi.dll
GetModuleInformation, EnumProcessModules, GetModuleFileNameExW
rpcrt4.dll
UuidToStringW, RpcStringFreeW
shell32.dll
SHGetSpecialFolderPathW
shlwapi.dll
PathAddExtensionW, PathAppendW, PathFileExistsW, PathFindExtensionW, PathRemoveExtensionW, PathFindFileNameW, PathIsDirectoryW, PathRemoveFileSpecW, PathStripPathA, StrCmpW, PathStripPathW, PathStripToRootW
user32.dll
SetWindowLongW, IsWindow, GetClassNameA, KillTimer, CallNextHookEx, FindWindowW, EndDialog, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxA, UnregisterClassA, LoadStringA, LoadStringW, SendMessageW, GetWindowTextW, GetWindowLongW, GetDlgItem, GetClassNameW, RegisterWindowMessageW, MessageBoxW
version.dll
GetFileVersionInfoSizeW, VerQueryValueW, GetFileVersionInfoW
winhttp.dll
WinHttpOpenRequest, WinHttpQueryHeaders, WinHttpGetIEProxyConfigForCurrentUser, WinHttpSetStatusCallback, WinHttpSendRequest, WinHttpReadData, WinHttpQueryDataAvailable, WinHttpAddRequestHeaders, WinHttpReceiveResponse, WinHttpCloseHandle, WinHttpConnect, WinHttpGetProxyForUrl, WinHttpSetOption, WinHttpOpen
Export table
InitMonitor
ProtectedDebugProc
ProtectedShellProc
RunChMonitor
StopChMonitor
TrackFile

BitGuard.dll

Application Manager by MediaTechSoft Inc. (Signed)

Remove BitGuard.dll
Version:   2,6,1694,246
MD5:   d6a38f85e6cd4250a55c6c626427de09
SHA1:   3c9370eea837d25aca43d57a82db1b5d9a5b5852
SHA256:   8d149098da62843c855222ff62a89ada09716ea530477a182a9aa4343dd9dbdc
Warning 27 antivirus scanners has detected malware.

Overview

BitGuard.dll is malware that is loaded as dynamic link library that runs in the context of a process. This is typically installed with the program BitGuard published by MediaTechSoft Inc. and is most likely removed by most users once installed (74% removed). The file is digitally signed by MediaTechSoft Inc. which was issued by the GoDaddy.com certificate authority (CA).

DetailsDetails

File name:BitGuard.dll
Publisher:PerformerSoft LLC
Product name:Application Manager
Description:Protector
Typical file path:C:\ProgramData\BitGuard\2.6.1673.238\{16cdff19-861d-48e3-a751-d99a27784753}\BitGuard.dll
File version:2,6,1694,246
Size:2.58 MB (2,704,352 bytes)
Build date:10/1/2013 4:46 AM
Certificate
Issued to:MediaTechSoft Inc.
Authority (CA):GoDaddy.com
Effective date:Sunday, August 4, 2013
Expiration date:Tuesday, March 29, 2016
Digital DNA
PE subsystem:Windows Console
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
BitGuard
 MediaTechSoft Inc.
  74% remove
BitGuard also known as BProtector, Application Manager and Browser Protector is an application designed to prevent the removal of software installed by the provider and affiliates (including web browser extensions deployed by PerformerSoft). BitGuard and its variations are registered under the company name MediaTechSoft but actually are associated with PerformerSoft LLC. While the BitGuard service (BitGuard.exe) is signed with a digital...

MalwareMalware detections

Based on 40+ industry antivirus scanners, 27 of them detected the following malware.
Antivirus engineEngine versionDetection
AhnLab V3 Internet Security 2013.11.13 Trojan/Win32.Generic
Avira AntiVir 7.11.113.32 APPL/BProtector.Gen
avast! 8.0.1489.320 Win32:BProtect-A [PUP]
AVG 13.0.0.3169 Bprotect.C
BitDefender 7.2.5028.0 Gen:Variant.Adware.BHO.Bprotector.1
Bkav Security 1.3.0.4415 W32.Clod90c.Trojan.9755
CAT Quick Heal 11.13.12.00 TrojanDropper.Rotbrow
Clam AntiVirus 0.97.3.0 Win.Adware.BProtector
Comodo Internet Security 17263 Application.Win32.bProtector.KA
Dr.Web 8.13.11.25 Adware.BGuard.28
Emsisoft Anti-Malware 3.0.0.589 Gen:Variant.Adware.BHO.Bprotector.1 (B)
ESET NOD32 7.9041 a variant of Win32/bProtector.A
Fortinet 5.1.147.0 Adware/Fam.NB
F-Secure 11.0.19100.45 Gen:Variant.Adware.BHO.Bprotector.1
G Data 13.11.22 Gen:Variant.Adware.BHO.Bprotector.1
K7 AntiVirus 9.173.10176 Unwanted-Program ( 00454f261 )
K7GW 9.173.10176 Unwanted-Program ( 00454f261 )
Kaspersky 9.0.0.837 HEUR:Trojan.Win32.Generic
Kingsoft 2013.4.9.267 Win32.Troj.Undef.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.Protector
McAfee 5.600.1067 Artemis!D6A38F85E6CD
McAfee Gateway Anti-Malware v2013-dat Artemis!D6A38F85E6CD
Microsoft Security Essentials 1.10003.0 TrojanDropper:Win32/Rotbrow.A
eScan by MicroWorld 12.0.250.0 Gen:Variant.Adware.BHO.Bprotector.1
Sophos 4.94.0 BProtector
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.F47V1001
VIPRE Antivirus 23320 InstallBrain (fs)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 43.75%
Windows 7 Home Premium 31.25%
Windows 7 Professional 6.25%
Windows Vista Home Basic 6.25%
Windows 8 Pro 6.25%
Microsoft Windows XP 6.25%

Distribution by countryDistribution by country

Germany installs about 12.50% of Application Manager.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 25.00%
Lenovo 20.00%
ASUS 20.00%
Acer 10.00%
Dell 10.00%
Samsung 10.00%
GIGABYTE 5.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE