Spyware Guard 2008 Still There

[BradHubbell]

I have Spyware Guard 2008 (and the eveil Windows Security Center shield) in my system tray and consistently running on my laptop.

I downloaded Malwarebyte's software, had to rename the exe to install it.

It runs to completion, find quite a few items to get rid of (including Spyware Guard), tells me there are a few files that need to be removed on reboot.

On reboot, Spyware Guard is still there.

The update does not work for me as all anti-virus sites are being blocked by Spyware Guard 2008.

Can I get a recent dat file to use?

Here is the developer's log file:

Malwarebytes' Anti-Malware 1.31

Database version: 1456

Windows 5.1.2600 Service Pack 2

12/20/2008 12:26:38 PM

mbam-log-2008-12-20 (12-25-59).txt

Scan type: Quick Scan

Objects scanned: 64544

Time elapsed: 6 minute(s), 32 second(s)

Memory Processes Infected: 1

Memory Modules Infected: 0

Registry Keys Infected: 1

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 3

Files Infected: 17

Memory Processes Infected:

C:\Program Files\Spyware Guard 2008\spywareguard.exe (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627614983807283667801397477708

461528190886683701140866683691119171711]

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\spyware guard 2008 (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627614983807283667801397477708

461528190886683701140866683691119171711]

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\spywareguard (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627614983807283667801397477708

461528190886683701140866683691119171711]

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

C:\Program Files\Spyware Guard 2008 (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627614983807283667801397477708

461528190886683701140866683691119171711]

C:\Program Files\Spyware Guard 2008\quarantine (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627614983807283667801397477708

461528190886683701140866683691119171711]

C:\Documents and Settings\Brad\Start Menu\Programs\Spyware Guard 2008 (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627613780688678707985840166796

90152708585747972846135836669615285668385014670798661498380728366788461528190886

6

83701140866683691119171711]

Files Infected:

C:\Program Files\Spyware Guard 2008\conf.cfg (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627614983807283667801397477708

461528190886683701140866683691119171711]

C:\Program Files\Spyware Guard 2008\mbase.vdb (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627614983807283667801397477708

461528190886683701140866683691119171711]

C:\Program Files\Spyware Guard 2008\quarantine.vdb (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627614983807283667801397477708

461528190886683701140866683691119171711]

C:\Program Files\Spyware Guard 2008\queue.vdb (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627614983807283667801397477708

461528190886683701140866683691119171711]

C:\Program Files\Spyware Guard 2008\spywareguard.exe (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627614983807283667801397477708

461528190886683701140866683691119171711]

C:\Program Files\Spyware Guard 2008\uninstall.exe (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627614983807283667801397477708

461528190886683701140866683691119171711]

C:\Program Files\Spyware Guard 2008\vbase.vdb (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627614983807283667801397477708

461528190886683701140866683691119171711]

C:\Documents and Settings\Brad\Start Menu\Programs\Spyware Guard 2008\Spyware Guard 2008.lnk (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627613780688678707985840166796

90152708585747972846135836669615285668385014670798661498380728366788461528190886

6

83701140866683691119171711]

C:\Documents and Settings\Brad\Start Menu\Programs\Spyware Guard 2008\Uninstall.lnk (Rogue.SpywareGuard) -> No action taken. [3742513051807286701552819088668370408666836913013627613780688678707985840166796

90152708585747972846135836669615285668385014670798661498380728366788461528190886

6

83701140866683691119171711]

C:\WINDOWS\sysexplorer.exe (Trojan.FakeAlert) -> No action taken. [3857535134305383807566791539667670347770838513013627615642473748565261849084323

232323232323215708970]

C:\WINDOWS\reged.exe (Rogue.SpywareGuard) -> No action taken. [3857535134305180728670155281908866837040866683691301362761564247374856526183707

2706915708970]

C:\WINDOWS\spoolsystem.exe (Rogue.SpywareGuard) -> No action taken. [3857535134305180728670155281908866837040866683691301362761564247374856526184818

0807784908485707815708970]

C:\WINDOWS\sys.com (Rogue.SpywareGuard) -> No action taken. [3857535134305180728670155281908866837040866683691301362761564247374856526184908

415688078]

C:\WINDOWS\syscert.exe (Rogue.SpywareGuard) -> No action taken. [3857535134305180728670155281908866837040866683691301362761564247374856526184908

46870838515708970]

C:\WINDOWS\vmreg.dll (Rogue.SpywareGuard) -> No action taken. [3857535134305180728670155281908866837040866683691301362761564247374856526187788

3707215697777]

C:\Documents and Settings\Brad\Local Settings\Temp\TDSSba67.tmp (Trojan.FakeAlert) -> No action taken. [3857535134305383807566791539667670347770838513013627613780688678707985840166796

90152708585747972846135836669614580686677015270858574797284615370788161533752523

2

32323215857881]

C:\Documents and Settings\Brad\Desktop\Spyware Guard 2008.lnk (Rogue.SpywareGuard) -> No action taken. [3857535134305180728670155281908866837040866683691301362761378068867870798584016

67969015270858574797284613583666961377084768580816152819088668370114086668369111

9

171711]

Regards,

Brad

[nosirrah]

Database version: 1456 <- your definitions

Database version: 1526 <- current definitions

I am unsure as to why you would think definitions 70 versions out of date would help with current malware .

[BradHubbell]

Database version: 1456 <- your definitions

Database version: 1526 <- current definitions

I am unsure as to why you would think definitions 70 versions out of date would help with current malware .

I can install MBAM, but it cannot update, hence the difference in the numbers. (I think I said that in the original email.)

Can I get the update version via another computer, put the file on my jump drive and add it to the Malwarebytes folder and then re-run the scan?

Thanks,

Brad

[BradHubbell]

Update:

I found the newest rules, downloaded them onto a clean computer and moved them to the infected computer.

The scan removed the Spyware Guard 2008 rogue.

The bad news: Internet access is now shut down via wireless and phone card.

Brad