7 replies to this topic

[puterputter]

I have a computer that is infected with Personal Guard 2009 or at least that is what the icon on the desk top calls it. I had malwarebytes instlalled on this machine before it was infected but it will not run. I have tried to run msconfig to stop the program from running but it wont open. System restore disabled and there is this message on my desktop saying Warning, you are in danger. Your computer is infected....ect. What is the first step in cleaning this thing up without formatting?

This computer is running windows xp and I am unable to boot to safe mode.



Thanks for any help
putter

[extremeboy]

Hello and welcome to the Malwarebytes forum!

Please follow the instructions mentioned over here: http://www.malwareby...?showtopic=9573

Download and run RootRepeal CR

Please download RootRepeal from the following location and save it to your desktop.

• Direct Download (Recommended)
  • Primary Mirror
    
  • Secondary Mirror
    
  • Secondary Mirror
    
  • Secondary Mirror
• Zip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
  
  • Primary Mirror
    
    
  • Secondary Mirror
    
    
  • Secondary Mirror

• Unzip the RootRepeal.zip file it to it's own folder. (If you did not use the "Direct Download" mirror to download RootRepeal).
  
• Close/Disable all other programs especially your security programs (anti-spyware, anti-virus, and firewall) Refer to this page, if you are unsure how.
  
• Physically disconnect your machine from the internet as your system will be unprotected.
  
• Double-click on RootRepeal.exe to run it. If you are using Vista, please right-click and run as Administrator...
  
• Click the tab at the bottom.
  
• Now press the button.
  
• A box will pop up, check the boxes beside All Seven options/scan area
  
  
• Now click OK.
  
• Another box will open, check the boxes beside all the drives, eg : C:\, then click OK.
  
• The scan will take a little while to run, so let it go unhindered.
  
• Once it is done, click the Save Report button.
  
• Save it as RepealScan and save it to your desktop
  
• Reconnect to the internet.
  
• Post the contents of that log in your reply please.

Then, please give me an update of the condition of your machine and what problems or symptoms you may have.

With Regards,
Extremeboy

[puterputter]

extremeboy, on Oct 2 2009, 07:30 PM, said:

Hello and welcome to the Malwarebytes forum!

Please follow the instructions mentioned over here: http://www.malwareby...?showtopic=9573

Download and run RootRepeal CR

Please download RootRepeal from the following location and save it to your desktop.

• Direct Download (Recommended)
  • Primary Mirror
    
  • Secondary Mirror
    
  • Secondary Mirror
    
  • Secondary Mirror
• Zip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
  
  • Primary Mirror
    
    
  • Secondary Mirror
    
    
  • Secondary Mirror

• Unzip the RootRepeal.zip file it to it's own folder. (If you did not use the "Direct Download" mirror to download RootRepeal).
  
• Close/Disable all other programs especially your security programs (anti-spyware, anti-virus, and firewall) Refer to this page, if you are unsure how.
  
• Physically disconnect your machine from the internet as your system will be unprotected.
  
• Double-click on RootRepeal.exe to run it. If you are using Vista, please right-click and run as Administrator...
  
• Click the tab at the bottom.
  
• Now press the button.
  
• A box will pop up, check the boxes beside All Seven options/scan area
  
  
• Now click OK.
  
• Another box will open, check the boxes beside all the drives, eg : C:\, then click OK.
  
• The scan will take a little while to run, so let it go unhindered.
  
• Once it is done, click the Save Report button.
  
• Save it as RepealScan and save it to your desktop
  
• Reconnect to the internet.
  
• Post the contents of that log in your reply please.

Then, please give me an update of the condition of your machine and what problems or symptoms you may have.

With Regards,
Extremeboy

[extremeboy]

Hello.

Next time, please use the Add Reply button instead of replying directly and quoting everything I say. You quoted what I said in my previous post but I don't see any log information etc..

Please post those in your next reply.

~EB

[puterputter]

I was able to remove the infection by renaming malwarebytes and ran.

Thanks for the help
Puterputter

[extremeboy]

Hello.

Glad you resolve your initial problem however just because things seem better doesn't necessarily mean it's resolved.

DO you still wish to check and make sure you're clean and continue or do you think you're fine and I can close this topic off?

Let me know.

Thanks.

~EB

[extremeboy]

Bump..

[extremeboy]

Hello.

Since the problem appears to be resolved, this topic is now Closed.
If you need this topic reopened, please Send Me a Message. In your message please include the address of this thread in your request.

This applies only to the original topic starter

Everyone else please start a new topic.

With Regards,
Extremeboy