Spyware Guard disables Malwarebytes A-M?

[Gruff the Elder]

I'm trying to clean an XP Pro sp3 box of a particularly nasty piece of
malware called Spyware Guard 2008. From what I've seen on the net,
Malwarebytes AntiMalware is supposed to do a good job of removing this.

Although I've downloaded mbam-setup.exe, I can't get it to install. It
starts, but then it just sits there, with Task Manager showing allocated
memory of 2,016 K but no CPU usage. I've tried downloading this from the
normal download.com site, and from majorgeeks. I even tried an older version
of the setup exe that I had downloaded on another box. I've tried installing
it in safe mode with the same result.

Any suggestions either for removing Spyware Guard or getting MBAM to install?

 

[The Real Truth MVP]

Use my Remove-it software, it will remove that malware from your system.
Choose yes for all options when prompted. Download it here
http://pcbutts1.com/downloads/tools/tools.htm . When done follow up with
MBAM you will have to redownload it as the first installer is corrupted.

 

[thehman]

have you tried the malicious software removal tool from microsoft?

 

[Kelly]

Hi,

Start by stopping the process via Task Manager and remove it starting via
msconfig and the run keys (regedit).

The associated files are listed here:
http://www.malwarehelp.org/spyware-guard-2008-analysis-and-removal-2008.html

Cleaners that work: Line 393 - Right Hand Side:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Or see: http://www.kellys-korner-xp.com/xp_s.htm#spy

*Note: Update all (except HijackThis) before using.



--

All the Best and Happy Holidays,
Kelly (MS-MVP/DTS&XP)

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm

 

[Twayne]

Use my Remove-it software, it will remove that malware from your

system. Choose yes for all options when prompted. Download it here
http://pcbutts1.com/downloads/tools/tools.htm . When done follow up
with MBAM you will have to redownload it as the first installer is
corrupted.

Careful; this guy is using newgroups to BETA test his applications!
He's also a troll with many different noms.

 

[David B.]

That won't even touch the AV/Antispyware 2008 2009 group of malware.

 

[Mick Murphy]

Try doing everything, install, update, etc in "Safe Mode with Networking"

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.

http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

Download, install, and update.

Important re: Safe Mode
If you happen to find a problem that you can’t uninstall / delete, reboot
the computer, and go into Safe Mode.
To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow
key to get to Safe Mode from list of options, then hit ENTER.
RESCAN your computer with your Anti-Virus, Malwarebytes and Spybot S & D
while in Safe Mode.

If unable to install above Programs in Normal Mode:
Sometimes Trojans, Viruses, Malware, etc stop you installing and/or updating
Programs to remove them.
If that happens, reboot into Safe Mode with Networking, and install, update
and scan from there.

 

[The Real Truth MVP]

I'm not a guy. Where do you get your false information from or do you just
make it up on the fly? Remove-it is 4 years old. You need to stop trolling
me because all you are doing is making an ass out of yourself, do you always
ways make an ass out of yourself?

 

[PA Bear [MS MVP]]

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

2. Run this online scan (in safe mode w/networking, if need be):
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run additional checks for hijackware, including posting your hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

 

[PA Bear [MS MVP]]

You are a guy and you are NOT an MVP!

Ignore this MVP imposter!

For some background on this well-known thief, see David Lippman's posts in
this thread:
http://groups.google.com/group/micr..._frm/thread/5172ca5571f3e54f/656904085932c872

Specifically
http://groups.google.com/group/microsoft.public.security.homeusers/msg/213247814fb4d61e
and
http://groups.google.com/group/microsoft.public.security.homeusers/msg/e19fce884897662f

 

[Randem]

This process will get rid of that and most others
http://www.randem.com/virusproblems.html


--
Randem Systems
Your Installation Specialist
The Top Inno Setup Script Generator
http://www.randem.com/innoscript.html
http://www.randem.com/installerproblems.html
http://www.randem.com/vistainstalls.html
http://www.financialtrainingservices.org

 

[Gruff the Elder]

Thanks to all who replied. Using info from the link in Kelly's post in
conjunction with Autoruns, I disabled enough of Spyware Guard 2008 to permit
SuperAntiSpyware to install and run. Not surprisingly, this found several
other nasties, including a rootkit. Once SAS ran, I could also install and
run Malwarebytes AntiMalware. I've now run both of these iteratively several
times, and things appear to be clear -- although with rootkits, one never
knows. I'm going to run the onecare online scan as well.

 

[Kayman]

Thanks to all who replied. Using info from the link in Kelly's post in
conjunction with Autoruns, I disabled enough of Spyware Guard 2008 to permit
SuperAntiSpyware to install and run. Not surprisingly, this found several
other nasties, including a rootkit. Once SAS ran, I could also install and
run Malwarebytes AntiMalware. I've now run both of these iteratively several
times, and things appear to be clear -- although with rootkits, one never
knows. I'm going to run the onecare online scan as well.

*GMER* - is an application that detects and removes rootkits.
http://www.gmer.net/index.php
http://antirootkit.com/forums/index.php?sid=9e746bb696ac0bb38781ffe4361c3a17