System
Guard 2009 Removal Guide:
**Our
recommendation: Automatically Remove System Guard 2009
with Spyware
Doctor

What is System Guard 2009?
System Guard 2009 is a rogue antispyware program that is
designed to scare you into purchasing a licensed version via
aggressive and false advertising that claims you have numerous
spyware infections.
**Note that System Guard 2009 is NOT a legitimate spyware
removal software**
Details:
System Guard 2009 will infect your computer via one of two
methods:
1. Trojan Vundo - if you are infected with the Vundo Trojan,
you will then receive consistent popups that state that your
computer is infected and you need to install System Guard 2009
in order to protect your computer.
2. Fake Advertising - when visiting certain websites, you
will see popups from the site that will inform you that your
computer is infected. You will then be redirected to a webpage
stating that a spyware is taking place when in fact, it is not.
After several minutes, the fake scan will complete and tell you
that you are infected and that you need to install System Guard
2009.
Once downloaded and installed, System Guard 2009 will
automatically configure itself to always run in the background
and will start up each time you reboot and start Windows. The
program will then perform an additional scan of your computer
and those scan results will show that you are inundated with
spyware.
The files listed in those scan results are either
non-existent or are actual legitimate Windows files that it
needs to run properly. If the legitimate files end up being
deleted, your computer may stop running.
Also, while it is running you will continue to see
consistent fake security alerts informing you that your
computer has any number of security risks - including files
that have been changed or data being sent over the internet to
a remote host.
All of the scan results and alerts are false and are only
designed to get you to purchase a licensed version of this
bogus antispyware software.
Effects on Your computer:
- General slowness and performance issues
- Browser Hijack (changing search results or browser home
pages)
- Certain websites blocked - often legitimate antispyware
sites
- Additional malware and spyware being downloaded and installed
without you knowing
- Various errors, freezing, and crashes
Screenshots:




Removal:
Automatic Removal (Highly Recommended):
1. Download and Install Spyware Doctor,
which effectively removes System Guard 2009
completely:
2. Run a Full System Scan by Opening Spyware Doctor and
clicking on Scan Computer Now
3. When scan is complete, click check all to ensure all
infections are removed
4. Click Fix Checked to remove System Guard 2009 and all
other infections
Manual Removal (Not recommended)
If you are a trained computer professional, you can attempt
to remove System Guard 2009 by stopping the following process
and removing the following files and regsitry entries:
Processes:
systemguard.exe
uninstall.exe
reged.exe
spoolsystem.exe
syscert.exe
sysexplorer.exe
winscenter.exe
Files:
c:\Program Files\System Guard 2009
c:\Program Files\System Guard 2009\conf.cfg
c:\Program Files\System Guard 2009\mbase.vdb
c:\Program Files\System Guard 2009\quarantine.vdb
c:\Program Files\System Guard 2009\queue.vdb
c:\Program Files\System Guard 2009\systemguard.exe
c:\Program Files\System Guard 2009\uninstall.exe
c:\Program Files\System Guard 2009\vbase.vdb
c:\Program Files\System Guard 2009\quarantine
c:\WINDOWS\reged.exe
c:\WINDOWS\spoolsystem.exe
c:\WINDOWS\sys.com
c:\WINDOWS\syscert.exe
c:\WINDOWS\sysexplorer.exe
c:\WINDOWS\vmreg.dll
c:\WINDOWS\system32\winscenter.exe
c:\Documents and Settings\Bleeping\Desktop\System Guard
2009.lnk
c:\Documents and Settings\Bleeping\Start Menu\Programs\System
Guard 2009
c:\Documents and Settings\Bleeping\Start Menu\Programs\System
Guard 2009\System Guard 2009.lnk
c:\Documents and Settings\Bleeping\Start Menu\Programs\System
Guard 2009\Uninstall.lnk
c:\Documents and Settings\All Users\Application
Data\winlogon.exe
c:\Documents and Settings\All Users\Application
Data\Microsoft\Network\svchost.exe
c:\Documents and Settings\All Users\Application
Data\Microsoft\Network\track.sys
c:\Documents and Settings\All Users\Application
Data\Microsoft\Network\DLLs
c:\Documents and Settings\All Users\Application
Data\Microsoft\Network\DLLs\c.cgm
c:\Documents and Settings\All Users\Application
Data\Microsoft\Network\DLLs\eewhptdpyl.dll
c:\Documents and Settings\All Users\Application
Data\Microsoft\Network\DLLs\ieModule.dll
c:\Documents and Settings\All Users\Application
Data\Microsoft\Network\DLLs\moduleie.dll
Registry Entries:
HKEY_CLASSES_ROOT\CLSID\{77C96E10-FDA7-4AA7-B318-0631C0D27DBB}
HKEY_CLASSES_ROOT\CLSID\{AB6DAA8C-F726-4FDD-8B06-9537C5878612}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\System
Guard 2009
HKEY_LOCAL_MACHINE\SOFTWARE\System Guard 2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"systemguard"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
"ieModule"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
"InternetConnection"
Prevention of Future
Attacks/Infections:
Ensure you have IntelliGuard running on Spyware Doctor. This
is their real time protection agent - it is the most advanced
real-time protection you will find anywhere. This will block
all future spyware and malware from ever getting onto your
computer.

*Disclaimer -
the information presented in the manual removal section of this
guide is meant to be used as an aid to assist you with removing
spyware infections by yourself and is to be used at your own
risk. As stated, we do not recommend manual spyware
removal in any situation as this can cause any number of
additional problems with your computer, including causing your
computer to stop functioning altogether. As such,
thebestspywareremovers.com cannot be held responsible for
problems that may occur with any manual spyware removal process
that you willfully choose to engage in.*
|