Should I block it?
No, this file is 100% safe to run.
Relationships
Parent process
Related files
guardicq.exe
GuardMailRu Module by LLC Mail.Ru (Signed)
| Version: | 1, 0, 0, 296 |
| MD5: | e859ca020ed61899f3c74a8d0032d05c |
| SHA1: | da1c996598d1755d8b2b77081ea5bbc23125d10e |
| SHA256: | 6bdb0e1e8aa0ca2afe82eeb86936e824dc5d8473d1539a953ea5369db04e63ce |
About guardicq.exe (from LLC Mail.Ru)
“Practice safe chatting: ICQ Guard is designed specifically to protect your personal files and data when using ICQ and ICQ-based chat and messaging systems. The program supports all versions of ICQ up ”
Overview
guardicq.exe runs as a service under the name Guard.Mail.ru within the local user context. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program Guard.ICQ published by Mail.Ru. The file is digitally signed by LLC Mail.Ru.
Details
| File name: | guardicq.exe |
| Product name: | GuardMailRu Module |
| Typical file path: | C:\Program Files\guard-icq\guardicq.exe |
| Original name: | GuardMailRu.exe |
| File version: | 1, 0, 0, 296 |
| Size: | 1.49 MB (1,564,368 bytes) |
| Certificate |
| Issued to: | LLC Mail.Ru |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Guard.Mail.ru.gui' → "C:\Program Files\Guard-ICQ\GuardICQ.exe" /gui
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.02582600% | |
| Kernel CPU: | 0.01688891% | |
| User CPU: | 0.00893709% | |
| Kernel CPU time: | 148,991,008 ms/min | |
| CPU cycles: | 16,126,813/sec | |
| Context switches: | 22/sec | |
| Memory |
| Private memory: | 4.88 MB | |
| Private (maximum): | 9.97 MB | |
| Private (minimum): | 6.11 MB | |
| Non-paged memory: | 4.88 MB | |
| Virtual memory: | 92.6 MB | |
| Virtual memory (peak): | 98.36 MB | |
| Working set: | 7.23 MB | |
| Working set (peak): | 11.17 MB | |
| Page faults: | 11,473,060/min | |
| I/O |
| I/O read transfer: | 1.47 MB/sec | |
| I/O read operations: | 441/sec | |
| I/O write transfer: | 23.76 KB/sec | |
| I/O write operations: | 8/sec | |
| I/O other transfer: | 8.17 KB/sec | |
| I/O other operations: | 572/sec | |
| Resource allocations |
| Threads: | 10 | |
| Handles: | 224 | |
| GUI GDI count: | 61 | |
| GUI GDI peak: | 65 | |
| GUI USER count: | 44 | |
| GUI USER peak: | 47 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command lines: |
- "C:\Program Files\guard-icq\guardicq.exe" /gui
- "C:\Program Files\guard-icq\guardicq.exe"
|
| Owner: | User |
| Windows Service |
| Display name: | Guard.Mail.ru |
| Parent process: | services.exe (by Microsoft) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
54.55% |
|
| Windows 8 Pro |
36.36% |
|
| Windows 7 Ultimate N |
9.09% |
|
Distribution by country
Germany installs about 60.00% of GuardMailRu Module.
