Program installed itself, I can't uninstall, can't use another AntiVirus program, can't use regedit or restore. Any ideas?

I'm in no way an expert here but: Follow the adice in the malware sticky and the great peeps here will usually get to it when they have a moment.

One thing I learned a long time ago: MBAM will typically get you going again. But there will usually be remnents left that have to be dealt with. That's where the other items, ie HJThis help.

Bleepingcomputer.com will typically have the latest updates on malware going around and how to combat them.

I just got this deleted on 2 computers, this is what I did for my friends computer which seemed to be more tricky.

His problem was that he couldn't get into the task manager (on Vista) because the Antivirus Live would pretty much block everything.

Restart your computer and just as the desktop comes on, cntrl/alt/delete to get to the task manager. Now go to the processes and watch very carefully for a file that looks something like hxrssysguard.exe. The "sysguard" is what you are looking for. It will probably have around 4 letters in front of it. I'm pretty sure it is sysguard. Stop that process immediately. You should be able to get into the task manager as the Antivirus Live doesn't immediately load on startup.

Now get SuperAntiSpyware and have that run, and it should find it and clear it. Just to be safe, Malwarebytes should be installed and scanned also.

Make sure you scan your Antivirus after this is done also.

This just happened to me and its sick. Windows Security alert..everything is infected, please purchase!! Going to try what Italian said

Yes. read this before posting.

Another intelligent thing is to Google for Antivirus live. You will find a host of information.

Where did you get infected? I´d like to struggle with this thingy on my virtual system.

No wai brah, I never thought to use teh googles!!!11 Obviously I Googled it and was led to editing the registry etc. things that I wasn't able to access so that's why I posted here. The FAQ is helpful, but doesn't do any good when you can't download any of the programs mentioned. I have no idea where it came from.

Thanks to ItalianFX for his advice, as soon as I did that I was able to stop the program and run my Spyware program to get it taken care of.

Yup. Thank you Italian

I don´t understand how all you get infected.

I configured my IE to run all ActiveX without asking, I browsed p0rn, warez sites, dubious casino sites and clicked every link I could find, installed and uninstalled a rogue spyware from the rogue website antispyware dot com. I installed free screensavers and whatnot. And they only thing I got infected with was some silly adware.

imo www is completely safe and you do not need an AV.

Warning: DO NOT TRY THIS AT HOME. THIS SHOULD ONLY BE ATTEMPTED BY EXPERTS. YOU HAVE BEEN WARNED

LOL. Try this plugged directly into the cable modem using Windows XP Pre-SP2, enable & start every service, and turn off the windows firewall. You can even start an unprotected VNC session if you want to make it quicker.

Warning: DO NOT TRY THIS AT HOME. THIS SHOULD ONLY BE ATTEMPTED BY EXPERTS. YOU HAVE BEEN WARNED...TWICE


I am curious about the cause of these infections. I have to assume it's the result of downloading dubious products.

Hehe, I'm not quite an expert, but the first malware that can jump out of a virtual machine has yet to be programmed.

True and it's very hard to do what I suggested while in a VM because the default in most VM clients is to use NAT for easy networking.