Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

AntiSpy Safeguard

  • 08-09-2010 09:35PM
    #1
    Closed Accounts Posts: 4,128 ✭✭✭


    Hi,
    My BIL's laptop has become infected with "AntiSpy Safeguard". It is some sort of trojan I think.

    1. is it expensive to get rid of?
    2. Is is hard to get rid of?
    3. Can I download/do anything to get rid of it?

    The computer is vvvvvv slow and almost impossible to do anything.

    Thanks


Comments

  • Closed Accounts Posts: 13,874 ✭✭✭✭PogMoThoin


    http://www.malwarebytes.org/

    Get this, install it, update it. and run the full scan in safe mode (reboot, hit f8 just before the Windows screen and select safe mode)


  • Closed Accounts Posts: 4,128 ✭✭✭dellas1979


    Ok - I am going to download this to my laptop and burn it to disk.

    So, am booting up in safe mode and then inserting the disc?


  • Closed Accounts Posts: 13,874 ✭✭✭✭PogMoThoin


    In safe mode You wont have internet access to update the program to the latest definitions, nor will You be able to install a program. You'll have to install it in normal windows, You're going to have to get the Windows usable by killing the processes in task manager
    # Uninstall AntiSpy Safeguard from Control Panel
    Start > Settings > Control Panel > Add/Remove Programs. Double click to uninstall.
    # End these AntiSpy Safeguard processes:
    defender.exe
    antispy.exe
    tmp.exe
    To stop processes press Ctrl + Alt + Del or click Start > Run > type "taskmgr". Select malicious process in the list and click "End Process" button.

    Then do as I posted above in the first post


  • Closed Accounts Posts: 4,128 ✭✭✭dellas1979


    Thanks will try tom.


  • Registered Users, Registered Users 2 Posts: 1,340 ✭✭✭bhickey


    PogMoThoin wrote: »
    In safe mode You wont have internet access to update the program to the latest definitions, nor will You be able to install a program.

    Use 'Safe Mode with Networking'. Malwarebytes & Ccleaner will install and update themselves in Safe Mode with Networking.

    After running Malwarebytes in Safe Mode first, run it again in normal mode as apparently some of its detection routines work better in normal mode so it mightpick up some extra bits.


  • Advertisement
  • Closed Accounts Posts: 13,874 ✭✭✭✭PogMoThoin


    bhickey wrote: »
    Use 'Safe Mode with Networking'. Malwarebytes & Ccleaner will install and update themselves in Safe Mode with Networking.

    After running Malwarebytes in Safe Mode first, run it again in normal mode as apparently some of its detection routines work better in normal mode so it mightpick up some extra bits.

    Yes, Safe Mode with Networking may work, but if he's running wirelessly it most likely won't bring up his wireless card or launch the wireless software.


  • Closed Accounts Posts: 4,128 ✭✭✭dellas1979


    Lads I am confused about what am supposed to be doing - can you step by step it for me please?


  • Registered Users, Registered Users 2 Posts: 1,340 ✭✭✭bhickey


    dellas1979 wrote: »
    Lads I am confused about what am supposed to be doing - can you step by step it for me please?

    Go into Safe Mode with Networking. If you don't have Internet access in Safe Mode with Networking, use an ethernet cable if you can. If you don't have ann ethernet cable then you won't be updating either Malwarebytes or CCleaner until you can start Windows normally. Don't worry about it.

    So what you're doing in Safe Mode with Networking :

    Install (& update if you can) Malwarebytes and run it.
    Install (& update if you can) CCleaner and run it
    Start Windows Normally
    Update & run Malwarebytes again


  • Closed Accounts Posts: 4,128 ✭✭✭dellas1979


    Thanks for the help/ Am about to start.
    The thing is that its my BILs computer so he will not automatically be connected to my wireless network. I will need to set it up on the infected laptop. I am hoping this is possible on the safemode networking option?


  • Registered Users, Registered Users 2 Posts: 1,340 ✭✭✭bhickey


    Maybe not - try it and see. If it doesn't work then the simplest thing would be if you have a network cable then connect it directly to the router. You could also download whatever programs you need onto another computer and then transfer them onto the infected machine via a USB drive or burn them to a CD and copy them that way.


  • Advertisement
  • Closed Accounts Posts: 4,128 ✭✭✭dellas1979


    Thanks.
    I think I will download (and update?) on my machine and transfer by USB.
    Should I be installing on safe mode or normal windows? Do I need to stop the processes (as above) in Windows?
    Thanks again


  • Registered Users, Registered Users 2 Posts: 1,340 ✭✭✭bhickey


    dellas1979 wrote: »
    Should I be installing on safe mode or normal windows? Do I need to stop the processes (as above) in Windows?n

    Install Malwarebytes and Ccleaner in 'Safe Mode with Networking'. If they can update good, if not then just run them anyway. Then boot up normally and run Malwarebytes again, updating if possible.


  • Closed Accounts Posts: 4,128 ✭✭✭dellas1979


    I have just begun - when I hit F8 into safemode with Networking, the AntiSpy Safeguard is scanning the system constantly...should this happen in safe mode also?

    PS: How much would it cost to get something like this removed professionally?


  • Registered Users, Registered Users 2 Posts: 1,340 ✭✭✭bhickey


    dellas1979 wrote: »
    I have just begun - when I hit F8 into safemode with Networking, the AntiSpy Safeguard is scanning the system constantly...should this happen in safe mode also?

    That doesn't sound right. Are you sure you're in Safe Mode? It looks completely different from normal mode. Were you able to install & run Malwarebytes yet?

    PS: How much would it cost to get something like this removed professionally?

    It should only take 10-15 minutes so it wouldn't cost much.

    If you're still stuck then have a look at this for alternative removal instructions. It lets you download a file that tries to tackle the problem directly.


  • Closed Accounts Posts: 4,128 ✭✭✭dellas1979


    Am defo in safemode.

    I copied the malwarebytes file from USB and I am now scanning the system in safemode - I cant update. Looks like I will have to create the connection in normal windows.

    It is scanning for the last 25mins and says it has found 12 infected objects.

    I guess when its done I go back into normal windows and scan again?


  • Registered Users, Registered Users 2 Posts: 1,340 ✭✭✭bhickey


    dellas1979 wrote: »
    I guess when its done I go back into normal windows and scan again?

    Yes, some of its tests apparently work better in normal mode but I think it's always better to start off in Safe Mode first.


  • Closed Accounts Posts: 4,128 ✭✭✭dellas1979


    There is something really wrong happening.

    I scanned in safemode, and it found 850 infected files.
    I then quanantined them/deleted them, and it asked me to restart, which I did.

    Now the computer wont start up in normal windows.

    I can only start it up in safe mode and the Antispy Safeguard is still there when I launch safe mode.

    HELP!!!

    Edit: I went back into safemode, I had to "rescan" everything with that crappy spyware thing, probably undoing all the previous 1.5 hrs scanning. When I eventually got in, I restarted the laptop, and now its telling me "No bootable devices -- strike F1 to retry reboot, f2 for setup usability".

    I hit F1, nothing happens. f2 Im not sure what to do.

    Please help


  • Closed Accounts Posts: 4,128 ✭✭✭dellas1979


    Ah I dont know whats going on, after restarting about 10times, it eventually restarted in normal windows mode but the anti spy is still there.
    Now it is back in normal windows, in order to get into the main screen I have to "scan" files with Antispy first.

    :mad::mad:

    Help please.....and if you can, in small, clear steps.


  • Closed Accounts Posts: 9,698 ✭✭✭tricky D


    Read the 'I think I have a virus' sticky and carry out the instructions there.


  • Registered Users, Registered Users 2 Posts: 1,340 ✭✭✭bhickey


    dellas1979 wrote: »
    Ah I dont know whats going on, after restarting about 10times, it eventually restarted in normal windows mode but the anti spy is still there.

    I think at this stage, based on what's happened so far, you should try and do a backup of any important data on the laptop if you can. If there's no important data on it then it's often much quicker to just skip all the antivirus mullarkey and re-install Windows altogether. For that, you'd need all the reinstallation disks.


  • Advertisement
  • Closed Accounts Posts: 14 Musikhola


    You definitely can get rid of it. You just need to run anti-spyware program in a safe mode. You can try to remove it manually as well. Use manual removal guide, follow it step-by-step and you'll be able to get rid of the scam for good.


Advertisement