virus question

[skostro]

virus pic.jpg (379.2 KB)

Having a little trouble displaying this pic.
Brand new w7 computer, I run MSE everyday with no problems showing up. Then today, this shows up. (see jpg above).
Computer is still running fine.
Any ideas of what's going on?
When I click on 'remove all', it asks me to d/l and run a spyware program, but nothing happens after that.

 

[Orpheous]

Looks to me like another FakeAV virus variant...
The link to download will infect your system further DO NOT CLICK to download!!!
Have you tried running MSE full system scan by opening the program directly, and scanning from there?

 

[ickymay]

virus pic.jpg (379.2 KB)

Having a little trouble displaying this pic.
Brand new w7 computer, I run MSE everyday with no problems showing up. Then today, this shows up. (see jpg above).
Computer is still running fine.
Any ideas of what's going on?
When I click on 'remove all', it asks me to d/l and run a spyware program, but nothing happens after that.

that looks like rogue spyware DO NOT download anything from that page

close that page in your browser and right click scan with MSE from your taskbar icon, also download , update and then perform a full scan with malwarebytes and let us know how it went ?

 

[skostro]

I've run Mb, found nothing. Also ran MSE, found nothing.
A question on MSE. After MSE runs a full scan, where are the results? After running a scan, it reverts back to the 'home' page. Is there a way to view the results of the scan, and/or previous scans?

 

[Orpheous]

I believe that the current version doesn't include logfile viewing, it's been suggested and was under review for future implementation the last ime I heard.
Check the History tab for virus info.

What other security software do you have installed?

 

[Jacee]

Follow the manual removal instructions here:
Remove Antivirus Live (Uninstall Guide)

 

[skostro]

I believe that the current version doesn't include logfile viewing, it's been suggested and was under review for future implementation the last ime I heard.
Check the History tab for virus info.

What other security software do you have installed?

Just M/B & Spywareblaster

 

[TheIgster]

I know I keep suggesting this one, but that's because it works very well. Try Hitman Pro: Home - SurfRight

 

[Orpheous]

Follow the manual removal instructions here:
Remove Antivirus Live (Uninstall Guide)

Have you tried changing the settings and then MBAM in "safe mode with networking" as Jacee's link suggested yet?

 

[Novalis]

As much as most people don't like Microsoft products I have to say that Microsoft's Security Essentials works great on 7, and it's free. It even picks up on spyware as well. But I still use Malwarebytes for spywarre tho. (use the free version)

 

[IggyAZ]

virus pic.jpg (379.2 KB)

Having a little trouble displaying this pic.
Brand new w7 computer, I run MSE everyday with no problems showing up. Then today, this shows up. (see jpg above).
Computer is still running fine.
Any ideas of what's going on?
When I click on 'remove all', it asks me to d/l and run a spyware program, but nothing happens after that.

THIS IS THE ONE THAT GETS RID OF IT

This is what my borther had and the only thing that totally deleted it was Hitman Pro V3.5
Here is the link. Oh its free and only runs for 30 days.
Home - SurfRight

 

[TheIgster]

IggyAZ, that's what I said in post 8...

 

[IggyAZ]

IggyAZ, that's what I said in post 8...

Thanks. And still no reply if he used it or not.
Hitman Pro is becoming a valuable lifesaver.

 

[TheIgster]

Yeah, Hitman Pro really seems to be able to tackle systems that are pretty infected. The fact that you can run it from a USB drive s great as well, especially when you have malware that stops things from being installed.

 

[IggyAZ]

Yeah, Hitman Pro really seems to be able to tackle systems that are pretty infected. The fact that you can run it from a USB drive s great as well, especially when you have malware that stops things from being installed.

Ohh. Great information about loading it on a USB drive.
Thanks but we still haven't heard back from the poster.
Hopefully soon.

 

[ssaver]

Hi
I had 4 users in the past week get this or similar virus.
Everyone is right do not click anything.
I found this works for a quick fix gets my user up and running in about 10-15 minutes.
GO to IE > internet options> connections >LAN setting and take off proxy settings unless you sue then make sure they are your correct setting.

Now go to search and making sure to choose check hidden files and folders and search for "*sysguard.exe" ( no quotes)
Make note of complete path
Now reboot to safe mode
Navigate to the path just before the folder you found the *sysguard.exe file in
Delete that folder that has the *sysguard.exe file in it.

To play it safe delete all temporary files, cookies and history (not 100% necessary but a good idea.)
Reboot and you should be good to go.

Updating your spyware and virus protection and running a complete scan is a good idea, as a follow up.
Hope this helps, i did notice there were good solutions already posted but sometimes you need a another view so to speak.

 

[skostro]

My search.......found nothing

 

[Orpheous]

Did you try Jacee's suggestion?
http://www.sevenforums.com/system-security/58093-virus-question.html#post526710

 

[ssaver]

If you had hidden files and folder check to be inculded in your search and nothing showed up then yes Jacees suggestion is the best route.

Make sure your folder options are set to show hidden files and folders
iIn windows explorer choose tools> folder options>view
choose show hidden files and folder
and uncheck hide protected operating system files

****Just make sure you reverse this when down.

You could also look through C:\Documents and Settings\User name\Local Settings\Application Data check the folders that don't look right and if they contain a *sysgaurd.exe file of some sorts delete it.