Nprotect gamegaurd shutting down system

Discussion in 'Software' started by whatsamongoose, Nov 25, 2010.

  1. whatsamongoose

    whatsamongoose Private E-2

    i downloaded nprotect gamgaurd in a bundle with a game a while back its intent is to stop people from hacking online games. since then my computer started acting really wierd, like my harddrive would just stop. my computer would freeze, and it occured mostly when i was trying to run any kind of scan. since then i followed all your instructions via the malware link, and did some of my own research. apparently this little program acts like a rootkit, it constantly scans my computer and if it sees anything that it determines to be a threat it shuts it down. such as smss.exe which is a windows core file to start up winlogin and such. ive ran sophose anti rootkit and it cant find it mainly because just like a rootkit it hides itself from the proccess's running. i found the file but i cant delete it off my C drive, i found the two files in the registry but every time i delete those they magically appear again. this link http://www.brighthub.com/video-games/pc/articles/1709.aspx will give you a better idea of what it is and how it works and a way to delete it but sadly it doesnt work for me!
     
  2. Caliban

    Caliban I don't need no steenkin' title!

    Greetings, whatsamongoose.

    The fact that you've followed the steps listed in your link and still have problems, coupled with the posts in your other thread, indicate to me that it might be best to follow the steps listed in the Malware Forum's Read & Run Me First thread and attach the required logs to a new thread in that forum.
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Try the below to remove the service for Game Guard.


    Please click Start, All Program, Accessories and you will see ( among other things ) a Command Prompt entry.
    • Right click the Command Prompt entry and select Run As Administrator.
      • It is critical that you run it this way.
    • If you do this properly, a command prompt window will open with a title of Administrator Command Prompt.
    • Enter the below commands at the command prompt each followed by the enter key. The bold black are commands. The purple is merely informational.
    sc stop npggsvc <-- this attempts to stop the game guard service
    sc delete npggsvc <-- this attempts to delete the game guard service


    Now reboot your PC. After reboot, delete the below file:

    C:\Windows\system32\GameMon.des.exe
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds