PSguard Friend or Foe

desertdog · Jul 13, 2005

I recently spoke with Linksys support in order to set up WEP on my wireless system at home. They asked that I disable Spybot & SpywareBlaster. After the process was completed I returned my system back to normal, I clicked on download updates on Spyware Blaster. I immediately received a message that my system had a Virus, my screen turned blue and that the message stated that the virus could be removed by my spyware or Antivirus program. I ran Norton 2005. Among others I had 2 viruses that could not be fixed. Trojan.Desktophijack b and w32.desktophijack. Identical to one of your previous postings with one difference I noticed that an Icon labeled PSguard showed up on my desktop at the same time as the original error. Now, I have run all of the steps you listed as a prelim to requesting help. I Still have the problem. I do have my desktop back but Norton still flags the 2 viruses and I recently read that this PSguard may be a Virus as well. the next step on my list is loading and running HJT. What is this PSguard and is this what is preventing me from completely deleting the other 2 viruses? What else needs to be done or can it be taken care of with HJT

chaslang · Jul 14, 2005

PSGuard is something that we will need to get rid of but first we need go thru some standard cleanup processes as given below.

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

Log in or Sign up

PSguard Friend or Foe

desertdog Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member