Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

PCGuard [RESOLVED]


  • This topic is locked This topic is locked

#1
Shenlux

Shenlux

    New Member

  • Member
  • Pip
  • 2 posts
I tried to post a hjl and got sent to a page saying outdated version detected...? I tried to get a newer version but can't seem to find a download that works right now. If anyone has a current link I would appreciate it. My problem is NOT the malware itself. I think I took care of it. I had the hijacked browser and desktop telling me I had spyware and a little button in my quicklaunch toolbar that produced a spyware removal tool requiring registration. Some marketing strategy. At some point while I was trying to get rid of PCGuard th elittle button in the quicklaunch bar duplicated and I now have two. I have my desktop and browser back and everything seems to be clean except these buttons. They don't do anything anymore, just sit there staring at me. How can get rid of the buttons?
Thanks,
Shen
  • 0

Advertisements


#2
Avohir

Avohir

    Visiting Staff

  • Visiting Consultant
  • 1,002 posts
there is a link in the sticky in this forum, follow that and post a HijackThis log. Once you've done that I can assist you with completing removal of your parasite
  • 0

#3
Shenlux

Shenlux

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
Thanks. The HJT link worked this time. Don't think it's needed at the moment though. I went through the cleaning process one more time and the buttons and everything dissappeared. Let's see if I can remember what I did.....

I unchecked psgaurd.exe, intell32.exe, apigx.exe, winwb.exe and iedz.exe in task manager, rebooted to safe mode, did a search for each of the files on my computer and removed them. Then I rebooted and ran the latest version of Avast. This gave me back my desktop and browser and got rid of the "spyware removal" program but I had the two quicklaunch buttons for it. After a couple of restarts I found intell32.exe and psguard.exe back in the task manager but psguard seemed to be a ghost, no running program. I checked for suspicious run entries in the registry (yeah I know, not supposed to play with the registry) and ran the older version of hijackthis. I don't remember exactly what I found. Iwas very tired at that point. Sorry. :tazz:

I tried it again; unchecked intell32.exe and PSguard.exe in task manager, deleted them in safe mode and ran Avast again. This time the buttons and everything have dissappeared. After a few restarts there is no sign of this thing on my PC anymore. Hope this helps somebody.

BTW I am still running Win98se. All the info I found on removing PSGuard elsewhere required the use of ewido which doesn't work on my system. This wasn't as hairy as some of things that pop up on people's computers unwanted, but it had quite a presentation and took a while to get rid of it.
  • 0

#4
Avohir

Avohir

    Visiting Staff

  • Visiting Consultant
  • 1,002 posts
We actually have a targeted fix for smitfraud (and PSGuard is a variant of that) that is wonderfully effective in removing it. Unfortunately after the "do it yourself" repairs you've made, I'm not sure how effective it would be. However, since you appear to have resolved your issue I'll go ahead and close this topic.
  • 0

#5
Avohir

Avohir

    Visiting Staff

  • Visiting Consultant
  • 1,002 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :tazz:

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP