Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Dr Guard Nightmare


  • Please log in to reply

#1
nimchip

nimchip

    New Member

  • Member
  • Pip
  • 1 posts
Hi, I recently received a PC from a family member that had Dr Guard installed and I've been trying to no avail to remove it completely and to restore its functionality. At first I didn't know what Dr Guard was so I tried numerous things and found out that the task manager and safemode weren't working. I tried installing Malwarebytes Anti-Malware to check it but it wouldn't open, so after searching the internet I found out how to run MS Anti-Spyware tool and it found 10 viruses and spyware. After that I read how to make Malwarebytes Anti-Malware run by renaming it and so I installed it and later renamed the exe file in the program files directory to make it run. It found 20 additional viruses.

After that I thought that the problem was fixed so I tried installing AVG Free but at the very end of the installation it said that it couldn't start some .dll. So I searched again and saw that this could be caused by a rootkit, and so I downloaded and ran ComboFix by renaming it and found more problems. After that I ran numerous tools recommended by topics in this site such as OTS and RootRepeal but I am not sure if the problem is fixed. I have included the logs (numbered by run order) of all the scans I did except the first Malwarebytes Anti-Malware one in this topic.

Please help, otherwise I'm thinking I'm gonna have to ask my family member to see if I could reformat in order to completely obliterate this rootkit.

PS: I should add that after running most of these tools, the task manager option in the task bar is now lit up. However, I cannot run Internet Explorer as it is marked for illegal activity or something like that unless I run it as administrator. I haven't tried booting in safe mode.

Attached Files

  • Attached File  logs.zip   279.02KB   50 downloads

Edited by nimchip, 15 March 2010 - 01:03 PM.

  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP