Should I block it?

98%
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization

VersionsAdditional versions

2,6,1694,246 37.50%
2,6,1694,246 18.75%
2,6,1694,246 6.25%
2,6,1673,238 31.25%
2,6,1673,238 6.25%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
AddAce, ReportEventA, DeregisterEventSource, RegEnumKeyW, RegEnumValueW, RegEnumKeyExW, RegNotifyChangeKeyValue, RegDeleteKeyW, RegCreateKeyExW, RegSetValueExW, RegDeleteValueW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, ConvertStringSecurityDescriptorToSecurityDescriptorA, GetSecurityDescriptorSacl, SetSecurityDescriptorSacl, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, SetSecurityInfo, DeleteAce, GetAce, GetAclInformation, GetSecurityInfo, OpenProcessToken, OpenThreadToken, GetTokenInformation, InitializeAcl, GetLengthSid, RegisterEventSourceA
imagehlp.dll
ImageDirectoryEntryToData
kernel32.dll
DllMain
ole32.dll
CoInitialize, CoUninitialize, CoCreateInstance, CLSIDFromString
psapi.dll
GetModuleInformation, EnumProcessModules, GetModuleFileNameExW
rpcrt4.dll
UuidToStringW, RpcStringFreeW
shell32.dll
SHGetSpecialFolderPathW
shlwapi.dll
PathAddExtensionW, PathAppendW, PathFileExistsW, PathFindExtensionW, PathRemoveExtensionW, PathFindFileNameW, PathIsDirectoryW, PathRemoveFileSpecW, PathStripPathA, StrCmpW, PathStripPathW, PathStripToRootW
user32.dll
SetWindowLongW, IsWindow, GetClassNameA, KillTimer, CallNextHookEx, FindWindowW, EndDialog, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxA, UnregisterClassA, LoadStringA, LoadStringW, SendMessageW, GetWindowTextW, GetWindowLongW, GetDlgItem, GetClassNameW, RegisterWindowMessageW, MessageBoxW
version.dll
GetFileVersionInfoSizeW, VerQueryValueW, GetFileVersionInfoW
winhttp.dll
WinHttpOpenRequest, WinHttpQueryHeaders, WinHttpGetIEProxyConfigForCurrentUser, WinHttpSetStatusCallback, WinHttpSendRequest, WinHttpReadData, WinHttpQueryDataAvailable, WinHttpAddRequestHeaders, WinHttpReceiveResponse, WinHttpCloseHandle, WinHttpConnect, WinHttpGetProxyForUrl, WinHttpSetOption, WinHttpOpen
Export table
InitMonitor
ProtectedDebugProc
ProtectedShellProc
RunChMonitor
StopChMonitor
TrackFile

BitGuard.dll

Application Manager by MediaTechSoft Inc. (Signed)

Remove BitGuard.dll
Version:   2,6,1694,246
MD5:   d8c5172e113b9dc33ef49509d2fd84f1
SHA1:   2b58428240f1487988c434c09d995cf1993a91b1
SHA256:   aafcf523888050b1a4d61812d40bc325b3c7671a7472b09a43df5fb55d1205a2
Warning 24 antivirus scanners has detected malware.

Overview

BitGuard.dll is malware that is loaded as dynamic link library that runs in the context of a process. This is typically installed with the program BitGuard published by MediaTechSoft Inc. and is most likely removed by most users once installed (74% removed). The file is digitally signed by MediaTechSoft Inc. which was issued by the GoDaddy.com certificate authority (CA).

DetailsDetails

File name:BitGuard.dll
Publisher:PerformerSoft LLC
Product name:Application Manager
Description:Protector
Typical file path:C:\ProgramData\BitGuard\2.6.1673.238\{16cdff19-861d-48e3-a751-d99a27784753}\BitGuard.dll
File version:2,6,1694,246
Size:2.58 MB (2,704,352 bytes)
Build date:10/8/2013 5:16 AM
Certificate
Issued to:MediaTechSoft Inc.
Authority (CA):GoDaddy.com
Effective date:Sunday, August 4, 2013
Expiration date:Tuesday, March 29, 2016
Digital DNA
PE subsystem:Windows Console
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
BitGuard
 MediaTechSoft Inc.
  74% remove
BitGuard also known as BProtector, Application Manager and Browser Protector is an application designed to prevent the removal of software installed by the provider and affiliates (including web browser extensions deployed by PerformerSoft). BitGuard and its variations are registered under the company name MediaTechSoft but actually are associated with PerformerSoft LLC. While the BitGuard service (BitGuard.exe) is signed with a digital...

MalwareMalware detections

Based on 40+ industry antivirus scanners, 24 of them detected the following malware.
Antivirus engineEngine versionDetection
AhnLab V3 Internet Security 2013.10.25 Trojan/Win32.Generic
Avira AntiVir 7.11.109.96 APPL/BProtector.Gen
Antiy Labs AVL 2.0.3.7 Trojan/Win32.Generic
avast! 8.0.1489.320 Win32:BProtect-A [PUP]
AVG 13.0.0.3169 Bprotect.C
Bkav Security 1.3.0.4261 W32.Clod23f.Trojan.a0fc
Clam AntiVirus 0.97.3.0 Win.Adware.BProtector
Comodo Internet Security 17154 Application.Win32.bProtector.KA
Dr.Web 8.13.11.25 Adware.BGuard.28
Emsisoft Anti-Malware 3.0.0.589 Gen:Variant.Adware.BHO.Bprotector.1 (B)
ESET NOD32 7.8963 a variant of Win32/bProtector.A
Fortinet 5.1.147.0 Adware/Fam.NB
F-Secure 11.0.19100.45 Gen:Variant.Adware.BHO.Bprotector.1
G Data 13.11.22 Gen:Variant.Adware.BHO.Bprotector.1
Kaspersky 9.0.0.837 HEUR:Trojan.Win32.Generic
Kingsoft 2013.4.9.267 Win32.Troj.Undef.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.Protector
McAfee 5.600.1067 Artemis!D8C5172E113B
McAfee Gateway Anti-Malware v2013-dat Artemis!D8C5172E113B
Microsoft Security Essentials 1.10003.0 TrojanDropper:Win32/Rotbrow.A
eScan by MicroWorld 12.0.250.0 Gen:Variant.Adware.BHO.Bprotector.1
Sophos 4.94.0 BProtector
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.F47V1010
VIPRE Antivirus 22702 InstallBrain (fs)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 43.75%
Windows 7 Home Premium 31.25%
Windows 7 Professional 6.25%
Windows Vista Home Basic 6.25%
Windows 8 Pro 6.25%
Microsoft Windows XP 6.25%

Distribution by countryDistribution by country

Germany installs about 12.50% of Application Manager.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 25.00%
Lenovo 20.00%
ASUS 20.00%
Acer 10.00%
Dell 10.00%
Samsung 10.00%
GIGABYTE 5.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE