There are many rogue security applications that you should keep on the lookout for, and XLGuarder is one of them. This rogue will infect your computer through Trojan horse programs and proceed to harass you. It will generate false security warnings and try to scan your computer. If it is allowed to scan your computer, it will yield nothing but a list of made up infections. It will then use these infections to try to frighten you into paying for its useless product.

Though XLGuarder may make many promises to help your computer, it will only hinder it in many ways. It will slow your computer’s performance as well as the Internet connection.

AKA:

XLife Guarder
XLG Security Center

XLGuarder file contents

spacer.gif
alertpage.jpg
warningpage.html
warning
uninstall.exe
winsystip.exe
sysutil_s.exe
sysutil.exe
Uninstall XLG.lnk
iebho.dll

If you have been infected with this program, you should remove it immediately. To remove XLGuarder manually, you should kill the following process:

XL Guarder

You should delete the following registry values:

HKEY_CLASSES_ROOT\CLSID\{D032570A-5F63-4812-A094-87D007C23012}
HKEY_CLASSES_ROOT\iebho.TIEAdvBHO
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = C:\WINDOWS\sysutils\sysutil.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysutils
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D032570A-5F63-4812-A094-87D007C23012}
HKEY_CURRENT_USER\Software\sysutils

You should also delete the following DLL and reboot your system:

%WINDIR%\iebho.dll

Finally, you should delete these files:

%WINDIR%\sysutils\warning\spacer.gif
%WINDIR%\sysutils\warning\alertpage.jpg
%WINDIR%\sysutils\warning\warningpage.html
%WINDIR%\sysutils\warning
%WINDIR%\sysutils\uninstall.exe
%WINDIR%\sysutils\winsystip.exe
%WINDIR%\sysutils\sysutil_s.exe
%WINDIR%\sysutils\sysutil.exe
%WINDIR%\sysutils\sounds\03.wav
%WINDIR%\sysutils\sounds\02.wav
%WINDIR%\sysutils\sounds\01.wav
%WINDIR%\sysutils\sounds
%WINDIR%\sysutils\settings.ini
%WINDIR%\sysutils
%WINDIR%\iebho.dll
%UserProfile%\Start Menu\Programs\Protection
%UserProfile%\Start Menu\Programs\Protection\Uninstall XLG.lnk

Removing XLGuarder from your computer isn’t enough though. More than likely there are other infections on it, especially if this threat appeared out of nowhere. In order to really make sure that your computer is free from malware, you should use SpyZooka.

SpyZooka is a legitimate antispyware program that has been developed by ZookaWare, a company in good standing with the Better Business Bureau. In fact, it is the only real antispyware that has a 100% spyware removal guarantee. Since it uses a robot to search over 100 million websites every day in the hunt for new malicious threats, you can be sure it will always be up to date. Get complete protection from spyware. Get SpyZooka today.