Should I block it?

98%
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization

VersionsAdditional versions

2,6,1694,246 37.50%
2,6,1694,246 18.75%
2,6,1694,246 6.25%
2,6,1673,238 31.25%
2,6,1673,238 6.25%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
AddAce, ReportEventA, DeregisterEventSource, RegEnumKeyW, RegEnumValueW, RegEnumKeyExW, RegNotifyChangeKeyValue, RegDeleteKeyW, RegCreateKeyExW, RegSetValueExW, RegDeleteValueW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, ConvertStringSecurityDescriptorToSecurityDescriptorA, GetSecurityDescriptorSacl, SetSecurityDescriptorSacl, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, SetSecurityInfo, DeleteAce, GetAce, GetAclInformation, GetSecurityInfo, OpenProcessToken, OpenThreadToken, GetTokenInformation, InitializeAcl, GetLengthSid, RegisterEventSourceA
imagehlp.dll
ImageDirectoryEntryToData
kernel32.dll
DllMain
ole32.dll
CoInitialize, CoUninitialize, CoCreateInstance, CLSIDFromString
psapi.dll
GetModuleInformation, EnumProcessModules, GetModuleFileNameExW
rpcrt4.dll
UuidToStringW, RpcStringFreeW
shell32.dll
SHGetSpecialFolderPathW
shlwapi.dll
PathAddExtensionW, PathAppendW, PathFileExistsW, PathFindExtensionW, PathRemoveExtensionW, PathFindFileNameW, PathIsDirectoryW, PathRemoveFileSpecW, PathStripPathA, StrCmpW, PathStripPathW, PathStripToRootW
user32.dll
SetWindowLongW, IsWindow, GetClassNameA, KillTimer, CallNextHookEx, FindWindowW, EndDialog, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxA, UnregisterClassA, LoadStringA, LoadStringW, SendMessageW, GetWindowTextW, GetWindowLongW, GetDlgItem, GetClassNameW, RegisterWindowMessageW, MessageBoxW
version.dll
GetFileVersionInfoSizeW, VerQueryValueW, GetFileVersionInfoW
winhttp.dll
WinHttpOpenRequest, WinHttpQueryHeaders, WinHttpGetIEProxyConfigForCurrentUser, WinHttpSetStatusCallback, WinHttpSendRequest, WinHttpReadData, WinHttpQueryDataAvailable, WinHttpAddRequestHeaders, WinHttpReceiveResponse, WinHttpCloseHandle, WinHttpConnect, WinHttpGetProxyForUrl, WinHttpSetOption, WinHttpOpen
Export table
InitMonitor
ProtectedDebugProc
ProtectedShellProc
RunChMonitor
StopChMonitor
TrackFile

BitGuard.dll

Application Manager by MediaTechSoft Inc. (Signed)

Remove BitGuard.dll
Version:   2,6,1673,238
MD5:   4708cbd3a820f48fa5e390c9211971b5
SHA1:   ba760a4e1e5afcd66160648e99fc57ec3c01443a
SHA256:   b3b132f86ebfe6976a483917caa93d467255418142f9b545e40149a1422eec00
Warning 22 antivirus scanners has detected malware.

Overview

BitGuard.dll is malware that is loaded as dynamic link library that runs in the context of a process. This is typically installed with the program BitGuard published by MediaTechSoft Inc. and is most likely removed by most users once installed (74% removed). The file is digitally signed by MediaTechSoft Inc. which was issued by the GoDaddy.com certificate authority (CA).

DetailsDetails

File name:BitGuard.dll
Publisher:PerformerSoft LLC
Product name:Application Manager
Description:Protector
Typical file path:C:\ProgramData\BitGuard\2.6.1673.238\{16cdff19-861d-48e3-a751-d99a27784753}\BitGuard.dll
File version:2,6,1673,238
Size:2.58 MB (2,700,768 bytes)
Build date:9/13/2013 5:00 PM
Certificate
Issued to:MediaTechSoft Inc.
Authority (CA):GoDaddy.com
Effective date:Sunday, August 4, 2013
Expiration date:Tuesday, March 29, 2016
Digital DNA
PE subsystem:Windows Console
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
BitGuard
 MediaTechSoft Inc.
  74% remove
BitGuard also known as BProtector, Application Manager and Browser Protector is an application designed to prevent the removal of software installed by the provider and affiliates (including web browser extensions deployed by PerformerSoft). BitGuard and its variations are registered under the company name MediaTechSoft but actually are associated with PerformerSoft LLC. While the BitGuard service (BitGuard.exe) is signed with a digital...

MalwareMalware detections

Based on 40+ industry antivirus scanners, 22 of them detected the following malware.
Antivirus engineEngine versionDetection
AhnLab V3 Internet Security 2013.10.14 Downloader/Win32.MultiDL
Avira AntiVir 7.11.107.130 APPL/BProtector.Gen
avast! 8.0.1489.320 Win32:BProtect-A [PUP]
AVG 13.0.0.3169 Bprotect.C
BitDefender 7.2 Gen:Variant.Adware.BHO.Bprotector.1
Comodo Internet Security 17104 Application.Win32.bProtector.KA
Dr.Web 8.13.10.15 Adware.BGuard.28
Emsisoft Anti-Malware 3.0.0.589 Gen:Variant.Adware.BHO.Bprotector.1 (B)
ESET NOD32 7.8913 a variant of Win32/bProtector.A
Fortinet 5.1.147.0 Adware/Fam.NB
F-Secure 11.0.19100.45 Gen:Variant.Adware.BHO.Bprotector.1
G Data 13.10.22 Gen:Variant.Adware.BHO.Bprotector.1
K7 AntiVirus 9.173.9850 Riskware
K7GW 12.7.0.14 Riskware
Kaspersky 9.0.0.837 Trojan-Downloader.Win32.MultiDL.r
Malwarebytes 1.75.0.1 PUP.Optional.PerformerSoft.A
McAfee 5.600.1067 Artemis!4708CBD3A820
McAfee Gateway Anti-Malware v2013-dat Artemis!4708CBD3A820
eScan by MicroWorld 12.0.250.0 Gen:Variant.Adware.BHO.Bprotector.1
Sophos 4.93.0 BProtector
Symantec 20131.1.5.61 Adware.GoonSquad
VIPRE Antivirus 22372 Trojan.Win32.Generic!BT

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 43.75%
Windows 7 Home Premium 31.25%
Windows 7 Professional 6.25%
Windows Vista Home Basic 6.25%
Windows 8 Pro 6.25%
Microsoft Windows XP 6.25%

Distribution by countryDistribution by country

Germany installs about 12.50% of Application Manager.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 25.00%
Lenovo 20.00%
ASUS 20.00%
Acer 10.00%
Dell 10.00%
Samsung 10.00%
GIGABYTE 5.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE