Comments on: Remove Spyware Protect 2009/SysGuard.exe (Removal Info) http://www.xp-vista.com/spyware-removal/spyware-protect-2009-removal Your Ultimate Source for Windows Security Fri, 20 Nov 2009 02:55:09 -0500 http://wordpress.org/?v=2.8.4 hourly 1 By: MWRadio http://www.xp-vista.com/spyware-removal/spyware-protect-2009-removal/comment-page-6#comment-25550 MWRadio Sun, 15 Nov 2009 17:48:51 +0000 http://www.xp-vista.com/?p=1747#comment-25550 Found this on a guy's computer 11/14/09. New varient. The main running process was named xjwlsysguard.exe. Created registry key HKey_Current_User\Software\AVScan. Also found the installer that ran at every reboot as imrppoiw. This installer needs to be removed too, or you will just have the program back again when you reboot! HKey_Local_Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Also somewhere else I forget now. To all the people who think these change themselves, they do not. There is a guy or team of guys out there writing this for thier own profit, enough people are dumb enough to pay them to fix the problem caused by this program to make it a million dollar business for the writers! The writers change the program regularly to make it harder to remove so you will knuckle under and pay them. Don't do it! The program is set up to install under one of several different names, so that it is harder to find and remove. It has a huge list to choose from, which is changed with each new release. The best way to find this is with Search. Look for files created about the time you first saw the "AntiVirus" or "AntiSpyware" scanner. Right click and look at thier properties. If they are from Microsoft or a Card vendor (Ati, Creativelabs etc.) you don't have the right one, keep looking. The one you are looking for will be an .exe, probably will not have an icon picture (it'll be the white box with the blue border), will not have a Company name! Found mine to be about 255kb (567.exe) So limit your search to be at least 254kb or more it will reduce the number of entries you need to check. It may also be more likely to be in a Temp folder or Temporary Internet Files. Mine was in C:\Documents and Settings\\Local Settings\Applicatioin Data\Temp Do not delete it. Rename it by just adding a chacter at the front so that you can put it back if you choose wrongly! When you find the one that reinstalls the program you will be able to kill and remove the ?sysgaurd.exe and when you reboot the thing won't start again. This is how you know you won! If you are clean for awhile with no other problems then you can safely go back and delete the files you renamed. Good Luck! Happy hunting. Found this on a guy’s computer 11/14/09. New varient. The main running process was named xjwlsysguard.exe. Created registry key HKey_Current_User\Software\AVScan. Also found the installer that ran at every reboot as imrppoiw. This installer needs to be removed too, or you will just have the program back again when you reboot! HKey_Local_Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Also somewhere else I forget now. To all the people who think these change themselves, they do not. There is a guy or team of guys out there writing this for thier own profit, enough people are dumb enough to pay them to fix the problem caused by this program to make it a million dollar business for the writers! The writers change the program regularly to make it harder to remove so you will knuckle under and pay them. Don’t do it! The program is set up to install under one of several different names, so that it is harder to find and remove. It has a huge list to choose from, which is changed with each new release. The best way to find this is with Search. Look for files created about the time you first saw the “AntiVirus” or “AntiSpyware” scanner. Right click and look at thier properties. If they are from Microsoft or a Card vendor (Ati, Creativelabs etc.) you don’t have the right one, keep looking. The one you are looking for will be an .exe, probably will not have an icon picture (it’ll be the white box with the blue border), will not have a Company name! Found mine to be about 255kb (567.exe) So limit your search to be at least 254kb or more it will reduce the number of entries you need to check. It may also be more likely to be in a Temp folder or Temporary Internet Files. Mine was in C:\Documents and Settings\\Local Settings\Applicatioin Data\Temp Do not delete it. Rename it by just adding a chacter at the front so that you can put it back if you choose wrongly! When you find the one that reinstalls the program you will be able to kill and remove the ?sysgaurd.exe and when you reboot the thing won’t start again. This is how you know you won! If you are clean for awhile with no other problems then you can safely go back and delete the files you renamed. Good Luck! Happy hunting.

]]> By: david http://www.xp-vista.com/spyware-removal/spyware-protect-2009-removal/comment-page-6#comment-25494 david Tue, 10 Nov 2009 15:49:04 +0000 http://www.xp-vista.com/?p=1747#comment-25494 Exactly HOW did you remove it? Nothing is working for me. Exactly HOW did you remove it? Nothing is working for me.

]]> By: sys remove http://www.xp-vista.com/spyware-removal/spyware-protect-2009-removal/comment-page-6#comment-25340 sys remove Sun, 25 Oct 2009 02:06:28 +0000 http://www.xp-vista.com/?p=1747#comment-25340 I found an easier way to remove the program after an hour of trying. step 1. open task manager and look for a program that resembles sysguard.exe. mine was labeled ssyslvg.exe. make sure you write the name of the task down before step 2. step 2. right click the program and end the process. it won't have any affect on your computer besides stopping the popups. step 3. go to the start menu and click search. type the name of the task you wrote down in the search bar. step 4. rename the the files that are found GAY because the files are infact gay buttfucking fags. also so you can remember the name to find them again incase it doesn't work the first time. step 5. right click the files and click delete to recycling bin. if the files don't delete the first time try again. it took me 2 attempts. step 6. empty your recycling bin and restart your computer. step 7. TURN YOUR FIREWALL ON. I found an easier way to remove the program after an hour of trying.

step 1. open task manager and look for a program that resembles sysguard.exe. mine was labeled ssyslvg.exe. make sure you write the name of the task down before step 2.

step 2. right click the program and end the process. it won’t have any affect on your computer besides stopping the popups.

step 3. go to the start menu and click search. type the name of the task you wrote down in the search bar.

step 4. rename the the files that are found GAY because the files are infact gay buttfucking fags. also so you can remember the name to find them again incase it doesn’t work the first time.

step 5. right click the files and click delete to recycling bin. if the files don’t delete the first time try again. it took me 2 attempts.

step 6. empty your recycling bin and restart your computer.

step 7. TURN YOUR FIREWALL ON.

]]>