Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

winguard2009.microsoft.com

Updated: 21 May 2010 | 2 comments
gl2009's picture
0 0 Votes
Login to vote

I have a piece of malware on my computer. The malware keeps wanting to redirect my pages to "winguard2009.microsoft.com". After running AntiVirus 2004 with today's (11-4-09) latest updates, I still can not get the items cleaned. The following files are showing infected:
C:\WINNT\System32\iehelper.dll
C:\WINNT\System32\tipjile.dll
C:\WINNT\System32\siruboma.dll
C:\WINNT\System32\fisuneje.dll

The following message is displayed:

"Actions taken: Clean Failed: Quarantine failed: Access denied.

My operatin system is Windows 2000, Version 5, (build 2195; Service Pack 4)

Any help that can be offered would be great,

Thanks.

Gary

discussion Filed Under:

Comments

riva11's picture
05
Nov
2009
2 Votes +2
Login to vote

SpywareProtect2009 removal instructions

I have seen a similar attack and this malware should be the SpywareProtect2009 virus. 

Read some technical details and removal instructions here : SpywareProtect2009

Here some instructions:

  • Disable System restore
  • Check and update if necessary virus definitions
  • Run a full system scan
  • Delete registry entries from the registry ( HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"sysguard" = "%Windir%\sysguard.exe" and registry subkey HKEY_CURRENT_USER\Software\AvScan )

Hope that it helps.

Regards,
Paolo

riva11's picture
10
Nov
2009
1 Vote +1
Login to vote

Virus status

Do you still have this virus on your computer ?

Regards,
Paolo