Additional versions

1, 0, 0, 596	16.33%
1, 0, 0, 556	8.16%
1, 0, 0, 549	2.04%
1, 0, 0, 548	2.04%
1, 0, 0, 545	24.49%
1, 0, 0, 501	4.08%
1, 0, 0, 501	2.04%
1, 0, 0, 493	8.16%
1, 0, 0, 462	22.45%
1, 0, 0, 453	2.04%
1, 0, 0, 448	2.04%
1, 0, 0, 339	2.04%
1, 0, 0, 241	2.04%
1, 0, 0, 210	2.04%

guardmailru.exe runs as a service under the name Guard.Mail.ru with extensive SYSTEM privileges (full administrator access). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including [email protected] published by Mail.Ru, Guard.Mail.ru from Mail.Ru and Guard.Mail.ru by Mail.Ru. The file is digitally signed by LLC Mail.Ru which was issued by the Thawte certificate authority (CA).

CPU
Total CPU:	0.00332370%	0.028634%
Kernel CPU:	0.00259062%	0.013761%
User CPU:	0.00073308%	0.014873%
Kernel CPU time:	436,875 ms/min	100,923,805ms/min
Context switches:	5/sec	284/sec
Memory
Private memory:	3.35 MB	21.59 MB
Private (maximum):	9.74 MB
Private (minimum):	3.94 MB
Non-paged memory:	3.35 MB	21.59 MB
Virtual memory:	74.01 MB	140.96 MB
Virtual memory (peak):	77.02 MB	169.69 MB
Working set:	9.54 MB	18.61 MB
Working set (peak):	10 MB	37.95 MB
Resource allocations
Threads:	8	12
Handles:	231	600
GUI GDI count:	48	103
GUI USER count:	26	49