Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

hijacked desktop


  • This topic is locked This topic is locked

#31
therock247uk

therock247uk

    Expert

  • Expert
  • 14,672 posts
  • MVP
Can you try this version of smitrem http://noahdfear.gee...com/smitRem.zip you will need to delete the other folder of the other one.
  • 0

Advertisements


#32
tut

tut

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
This new version of smitRem did not run for me either. Is it because of the PSGuard infection?

Did the WinPFind report help at all?
  • 0

#33
tut

tut

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
Ewido gave me a registry key location for PSGuard and intell32.exe, but I can not find this path..

My Computer\HKeys_Local_Machine\Software\Microsoft\Windows\Current Version\Run...

If I find this location maybe I can delete these files???

Does this Help???
  • 0

#34
therock247uk

therock247uk

    Expert

  • Expert
  • 14,672 posts
  • MVP
1. Go to Start > Settings > Control Panel > Add/Remove and uninstall the following.

Psguard

2. Reboot and post a new Hijackthis log here in a reply.
  • 0

#35
tut

tut

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
This is really frustrating... there is no PSguard program on the list to remove. It is hiding in the HKey registry for start up programs along with the intell32.exe.

Should I just reinstall Windows XP on my computer???
  • 0

#36
therock247uk

therock247uk

    Expert

  • Expert
  • 14,672 posts
  • MVP
Download http://www.atribune....tRemspecial.zip unzip to your desktop press ctrl + alt +del on your keyboard this will bring task manger up end explorer.exe then go to file new task and run the bat that is inside the folder you unziped ealryer. Then post a new Hijackthis log here in a reply.
  • 0

#37
tut

tut

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
I downloaded the new smitRem and unzipped the file. I shut down explorer and opened up the bat file. When I press any key for the third time, the screen scrolls the message: ACCESS IS DENIED. And then the bat screen disappears and nothing else happens.
  • 0

#38
therock247uk

therock247uk

    Expert

  • Expert
  • 14,672 posts
  • MVP
Ok first just go to C:\Program Files\Psguard run the uninstaller that is there.

Then post a new Hijackthis log here in a reply.
  • 0

#39
tut

tut

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
PSGuard does not show up as a program file in my C Drive or in Add/Remove Programs.
  • 0

#40
therock247uk

therock247uk

    Expert

  • Expert
  • 14,672 posts
  • MVP
So there is no folder called Psguard in C:\Program Files\?
  • 0

Advertisements


#41
tut

tut

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
NO.
  • 0

#42
therock247uk

therock247uk

    Expert

  • Expert
  • 14,672 posts
  • MVP
Do you have show hidden files on? If not turn it on go here for instuctions http://www.xtra.co.n...1916458,00.html then you should be able to see the folder.
  • 0

#43
tut

tut

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
I have show hidden folders turned on!! There is no folder called PSGuard in program files or in add/remove programs.
  • 0

#44
therock247uk

therock247uk

    Expert

  • Expert
  • 14,672 posts
  • MVP
Are you sure your logged in as a local Administrator?
  • 0

#45
tut

tut

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
No I'm not sure. We have a systems administrator that has control over everyones computer. I do not know how to log in as a local administrator, if I even can.

Please understand I am trying to fix this problem without involving the systems administrator.

If I have to get him involved, he will take care of this problem himself.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP