Important PSGuard info

In addition to the files most every spyware removal program like Ad-Aware or Spybot find regarding PSGuard, there are several you can find only with a virus scanner. In addition, these files must usually be manually deleted, meaning no matter how much you scan and remove stuff, PSGuard will keep coming back.

When you attack PSGuard, HijackThis to remove the intell32.exe entry and anything related to PSGuard. Then delete anything on your computer (folders or files) with PSGuard in it, as well as C:\Windows\Sysytem\intell32.exe.

Your registry should be cleaned of all its stuff too, and many different programs on www.download.com specifically tailored to attack Spyware like the programs I mentioned (and many others), will take care of this. I would recommend going to their anti-spyware center, reading the Horror Stories of Spyware, and downloading all of the programs they recommend.

Now, the meat of the post.

PSGuard puts files in your C:\_Restore\Temp directory, where they are nigh impervious to removal short of digging them out yourself. To eliminate them, turn off your automatic system updater from your My Computer - Properties - Performance - File System - Troubleshooting or wherever it is, then make it so you can see "All Folders and Files" and "Hidden Files" from your Tools - Folder Options - View (In Explorer, when you're looking at folders and files).

Then delete every last file in there. They are all backups to previous system snapshots, but you don't want to go back to a backup with spyware in it, do you?

After you have done all these things, PSGuard will not come back. Make sure you eliminate those sneaky files, and scan your system with multiple Spyware and virus checkers.

Also, if anyone has the address to the person responsible for this thing, please post it here so I can break into their house, tie them up and teabag the son of a biitch.

Chris

Edited by Wallbridge, 08 August 2005 - 05:00 AM.