winguard2009.microsoft.com

gl2009's picture

I have a piece of malware on my computer. The malware keeps wanting to redirect my pages to "winguard2009.microsoft.com". After running AntiVirus 2004 with today's (11-4-09) latest updates, I still can not get the items cleaned. The following files are showing infected:
C:\WINNT\System32\iehelper.dll
C:\WINNT\System32\tipjile.dll
C:\WINNT\System32\siruboma.dll
C:\WINNT\System32\fisuneje.dll

The following message is displayed:

"Actions taken: Clean Failed: Quarantine failed: Access denied.

My operatin system is Windows 2000, Version 5, (build 2195; Service Pack 4)

Any help that can be offered would be great,

Thanks.

Gary

riva11's picture

SpywareProtect2009 removal instructions

I have seen a similar attack and this malware should be the SpywareProtect2009 virus. 

Read some technical details and removal instructions here : SpywareProtect2009

Here some instructions:

  • Disable System restore
  • Check and update if necessary virus definitions
  • Run a full system scan
  • Delete registry entries from the registry ( HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"sysguard" = "%Windir%\sysguard.exe" and registry subkey HKEY_CURRENT_USER\Software\AvScan )

Hope that it helps.

Regards,
Paolo

riva11's picture

Virus status

Do you still have this virus on your computer ?

Regards,
Paolo