Spyware Guard 2008
Spyware Guard 2008 is a potentially unwanted program that displays misleading scan reports derived from its own security scanner to convinced computer users to use, register and pay for the full version of the program. Spyware Guard 2008 is found to be originating from web sites like pyroscanner.com and spywareguard2008.com.
Usual propagation of Spyware Guard 2008 involves Trojan’s activities. Trojan may sneak into target computer without a notice from computer users and even anti-virus programs are unaware of its arrival. Once the system is infected, it modifies configuration settings of Internet browser, which makes it to redirect to malicious sites mentioned earlier. Installation of Spyware Guard 2008 on to visitor’s computer is now probable with a drive-by-download method employs by the website.
It is important to remove Spyware Guard 2008 immediately before it can add more harmful files inside the compromised PC. Follow the procedures on this page to get rid of this potentially unwanted program.
Screen Shot Image:
Technical Details and Additional Information:
Damage Level: Medium
Systems Affected: Windows 9x, 2000, XP, Vista
Malware Behavior
When the rogue program is activated on the computer, it will exhibit a number of fake security alerts. It also scans the system without user intervention and reports a number of threats detected on the computer. If user tries to remove these alerts, the fake anti-virus will prompt to register Spyware Guard 2008.
Registration
This version of Spyware Guard 2008 is for evaluating
purposes only. The removal features are disabled. You
may scan your PC to locate malwre/spyware threats.
To be able to remove threats, you should register Spyware Guard 2008
To register Spyware Guard 2008 click “Get License”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"spywareguard" = "C:\Program Files\Spyware Guard 2008\spywareguard.exe"Associated Files and Folders:
%UserProfile%\Application Data\Microsoft\Internet Explorer\olesys.dll %UserProfile%\Desktop\Spyware Guard 2008.lnk %UserProfile%\Start Menu\Programs\Spyware Guard 2008\Spyware Guard 2008.lnk %UserProfile%\Start Menu\Programs\Spyware Guard 2008\Uninstall.lnk %ProgramFiles%\Spyware Guard 2008\conf.cfg %ProgramFiles%\Spyware Guard 2008\mbase.vdb %ProgramFiles%\Spyware Guard 2008\quarantine.vdb %ProgramFiles%\Spyware Guard 2008\queue.vdb %ProgramFiles%\Spyware Guard 2008\spywareguard.exe %ProgramFiles%\Spyware Guard 2008\uninstall.exe %ProgramFiles%\Spyware Guard 2008\vbase.vdb %Windìr%\reged.exe %Windìr%\spoolsystem.exe %Windìr%\sys.com %Windìr%\syscert.exe %Windìr%\sysexplorer.exe %Windìr%\vmreg.dll
How to Remove Spyware Guard 2008
1. Reboot your computer in Safe Mode with Networking.
- Continue tapping F8 on your keyboard after turning on the computer.
- From the selections menu, select Safe Mode with Networking.
2. Connect to Internet and download SuperAntiSpyware here.
3. Install SAS with default configuration. It will prompt for update when installation has completed.
4. After installation and update, SuperAntiSpyware will open.
5. On main window, select Scan Type, choose Complete Scan. This is recommended to detect all files associated to Spyware Guard 2008.
6. Click on Scan your Computer…, this will give you options on which drive to scan.
7. On Scan Location, select c:\Fixed Drive.
8. Click on Start Complete Scan to begin the scanning process.
9. Scanning will take some time. Please be patient. When scanning is done, it will display the Scan Summary.
10. On scanning Window, items infected with Spyware Guard 2008 are marked in check.
11. Click Next to remove infected items.
12. It will prompt you to reboot your computer. Click Yes to reboot.
13. After a reboot, open SuperAntiSpyware again. Go to the Main Menu and click Manage Quarantine.
14. Select all items that were quarantined and click Remove. This will completely remove all files and components of Spyware Guard 2008.
15. Close the Window to exit SuperAntiSpyware.
precisesecurity
Oct 30, 2008 @ 02:39:38
1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) and save it on your Desktop.
2. After downloading, double-click on mbam-setup.exe to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
– Update Malwarebytes’ Anti-Malware
– Launch Malwarebytes’ Anti-Malware
5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
6. Scan your computer thoroughly.
7. When scanning is finished, click on the “Show Results”
8. Make sure that all detected threats are marked, click on Remove Selected.
9. Restart Windows.
Shannon
Dec 17, 2008 @ 03:52:07
This should DEFINITELY be bumped up to high risk. This thing has my computer in tatters. I can’t spend 5 minutes on it before it freezes up & I have to hard boot. I’m at risk of losing all my files, this is one NASTY bug!
Charlie
Dec 17, 2008 @ 15:19:48
Malwarebytes anti-malware really works except in my case Spyware Guard 2008 left a big red and white advertising window as background on my desktop. It replaced the background theme that I had in place. No anti-malware program will remove this. You have to remove it yourself.
Go to Start/Control Panel/Display/Appearance and look for the file “bg.” Go to Search and under “All files and folders” type in “bg” and voila! you will find bg.jpg and bg.bmp. Delete both files and you will have removed the last remnant of this vicious and nasty rogue application.
Andy
Dec 27, 2008 @ 15:30:37
I had the same problem. Installed MAMB and ran full scan. Still no luck
David
Jan 12, 2009 @ 21:52:12
One very important par that was left out of the process.
You MUST disable System Restore FIRST. Reboot the machine into “Safe Mode With Networking”, download, install, update and RUN Malwarebytes. Reboot into Safe Mode and scan AGAIN.
I’m currently working on a machine that got whacked by this little nasty but since the owner had tried running the machine anyway, it had PLENTY of time to download all sorts of other little pest including a Root Kit. Chances are his machine is going to need reloading.
David
Network Administrator and Nerd by profession.