Header Graphic

 

 

System Guard 2009 Removal Guide:

**Our recommendation: Automatically Remove System Guard 2009 with Spyware Doctor

 
Download Spyware Doctor

 

What is System Guard 2009?

System Guard 2009 is a rogue antispyware program that is designed to scare you into purchasing a licensed version via aggressive and false advertising that claims you have numerous spyware infections.

**Note that System Guard 2009 is NOT a legitimate spyware removal software**
 
Details:

System Guard 2009 will infect your computer via one of two methods:

1. Trojan Vundo - if you are infected with the Vundo Trojan, you will then receive consistent popups that state that your computer is infected and you need to install System Guard 2009 in order to protect your computer.

2. Fake Advertising - when visiting certain websites, you will see popups from the site that will inform you that your computer is infected. You will then be redirected to a webpage stating that a spyware is taking place when in fact, it is not. After several minutes, the fake scan will complete and tell you that you are infected and that you need to install System Guard 2009.

Once downloaded and installed, System Guard 2009 will automatically configure itself to always run in the background and will start up each time you reboot and start Windows. The program will then perform an additional scan of your computer and those scan results will show that you are inundated with spyware.

The files listed in those scan results are either non-existent or are actual legitimate Windows files that it needs to run properly. If the legitimate files end up being deleted, your computer may stop running.

Also, while it is running you will continue to see consistent fake security alerts informing you that your computer has any number of security risks - including files that have been changed or data being sent over the internet to a remote host.

All of the scan results and alerts are false and are only designed to get you to purchase a licensed version of this bogus antispyware software.

Effects on Your computer:

- General slowness and performance issues
- Browser Hijack (changing search results or browser home pages)
- Certain websites blocked - often legitimate antispyware sites
- Additional malware and spyware being downloaded and installed without you knowing
- Various errors, freezing, and crashes

Screenshots:

System Guard 2009

Fake System Guard Warning

Fake System Guard 20009 Scan Summary

Scan Summary


Removal:

Automatic Removal (Highly Recommended):

1. Download and Install Spyware Doctor, which effectively removes System Guard 2009 completely:


Download Spyware Doctor 

2. Run a Full System Scan by Opening Spyware Doctor and clicking on Scan Computer Now

3. When scan is complete, click check all to ensure all infections are removed

4. Click Fix Checked to remove System Guard 2009 and all other infections


Manual Removal (Not recommended)

If you are a trained computer professional, you can attempt to remove System Guard 2009 by stopping the following process and removing the following files and regsitry entries:

Processes:

systemguard.exe
uninstall.exe
reged.exe
spoolsystem.exe
syscert.exe
sysexplorer.exe
winscenter.exe

Files:

c:\Program Files\System Guard 2009
c:\Program Files\System Guard 2009\conf.cfg
c:\Program Files\System Guard 2009\mbase.vdb
c:\Program Files\System Guard 2009\quarantine.vdb
c:\Program Files\System Guard 2009\queue.vdb
c:\Program Files\System Guard 2009\systemguard.exe
c:\Program Files\System Guard 2009\uninstall.exe
c:\Program Files\System Guard 2009\vbase.vdb
c:\Program Files\System Guard 2009\quarantine
c:\WINDOWS\reged.exe
c:\WINDOWS\spoolsystem.exe
c:\WINDOWS\sys.com
c:\WINDOWS\syscert.exe
c:\WINDOWS\sysexplorer.exe
c:\WINDOWS\vmreg.dll
c:\WINDOWS\system32\winscenter.exe
c:\Documents and Settings\Bleeping\Desktop\System Guard 2009.lnk
c:\Documents and Settings\Bleeping\Start Menu\Programs\System Guard 2009
c:\Documents and Settings\Bleeping\Start Menu\Programs\System Guard 2009\System Guard 2009.lnk
c:\Documents and Settings\Bleeping\Start Menu\Programs\System Guard 2009\Uninstall.lnk
c:\Documents and Settings\All Users\Application Data\winlogon.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\svchost.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\track.sys
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\c.cgm
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\eewhptdpyl.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\ieModule.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\moduleie.dll

Registry Entries:

HKEY_CLASSES_ROOT\CLSID\{77C96E10-FDA7-4AA7-B318-0631C0D27DBB}
HKEY_CLASSES_ROOT\CLSID\{AB6DAA8C-F726-4FDD-8B06-9537C5878612}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\System Guard 2009
HKEY_LOCAL_MACHINE\SOFTWARE\System Guard 2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "systemguard"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad "ieModule"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad "InternetConnection"

Prevention of Future Attacks/Infections:

Ensure you have IntelliGuard running on Spyware Doctor. This is their real time protection agent - it is the most advanced real-time protection you will find anywhere. This will block all future spyware and malware from ever getting onto your computer. 


Download Spyware Doctor

 

*Disclaimer - the information presented in the manual removal section of this guide is meant to be used as an aid to assist you with removing spyware infections by yourself and is to be used at your own risk.  As stated, we do not recommend manual spyware removal in any situation as this can cause any number of additional problems with your computer, including causing your computer to stop functioning altogether.  As such, thebestspywareremovers.com cannot be held responsible for problems that may occur with any manual spyware removal process that you willfully choose to engage in.*