4 replies to this topic

[Binney]

Hello,

I'm looking for some help removing a Spyware Guard 2008 infection.

I've run Windows Defender and it appears to have removed 80% of the infection (spyware guard processes nolonger appear and the spyware guard pop-ups are gone). However, Internet Explorer is still closing/redirecting while surfing and I can't run Malwarebytes, Super Anti Spyware or Hijack this.

I've tried renaming each of the above programs but they still won't install. When you try to install Malwarebytes you get as far as the language selection and then it closes. I've also tried running a 'portableapps' version of Malwarebytes from a memory stick, again it is stopped from running.

I've tried safe mode and restarting with last known good settings but still no luck.

Norton spyware removal will run but doesn't detect the infection.

Please can somebody offer some assistance in getting MB to run as it sounds like the answer to my problems.

One things I've concidered is taking the hard drive out of the machine and using MB running on another computer to scan it, is this possible?

Cheers

[ansi]

I'm having the exact same problem trying to remove SG 2008 from a friend's XP laptop. I really hope someone can help with this!

I've managed to cripple Spyware Guard by deleting files/folders/registry keys, etc. Unfortunately, the computer still won't allow any type of antivirus/antimalware programs to be run or allow any browser (IE or Firefox) to go to any antivirus/antimalware sites. Nor can a usb stick be accessed via windows explorer - has to be gotten to via a command window.

I have tried renaming the installation executables for Anti-Malware, Super-Anti-Spyware AND the Trend Micro HijackThis, but NONE of them will install. They appear to begin installing but then the installation window just disappears. (The files were all downloaded on my Mac, copied to a USB stick, and then copied to the XP box.)

None of the TDSS*.* files are anywhere on this system.

I'm really stumped at this point. Any suggestions?

Thanks!

[AdvancedSetup]

Please try to run the following. If it won't run then try to run it in SAFE MODE
Then try to run MBAM and UPDATE it and do a Quick Scan and fix anything found and post back all logs including a new HJT


[indent]Please visit this webpage for instructions for downloading ComboFix to your DESKTOP : how-to-use-combofix
Please ensure you read this guide carefully and install the Recovery Console first.
NOTE!!: You must save and run ComboFix.exe on your DESKTOP and not from any other folder.
Also, DO NOT click the mouse or launch any other applications while this is running or it may stall the program

Additional links to download the tool:
ComboFix.exe
ComboFix.exe
ComboFix.exe

Note: The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:

• Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  
• Click Yes to allow ComboFix to continue scanning for malware.
  
• When the tool is finished, it will produce a report for you.
  
• Please post the C:\ComboFix.txt along with a new HijackThis log so we may continue cleaning the system.

[/indent]

[AdvancedSetup]

Please post a status update or we'll be closing this post.

[AdvancedSetup]

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.