Quoted:
I was just downloading pictures for a sunday dinner pic and now my computer is under major attack. Everytime i try to go to a web page it is redirecting me and sending a fake error message to purchase spyware protect 2009. I am running xp and i want to get rid of this shit badly. I will renew your membership or buy you new ar15 membership if you can help

Quoted:
http://free.avg.com/

Quoted:
download....malwaremalbytes.

its a redirect trojan, and this is the only free program that kills it.

http://www.malwarebytes.org/mbam.php

Quoted:
Go into task manager and look for a program called "sysguard.exe"

end the process.

search for it in your computer and delete it.

Quoted:


This ^.
It will be in the windows folder.

Yes, it happened to me.

Quoted:
I have removed many of these same infections that deal with "antivirus 2009" on peoples computers here on campus.  I use a simple tool, just reboot into safe mode and run it.  It will flush it out.  Link If your on your iphone google "SmitFraudFix" and download that to your pc.

Quoted:

Spyware Protect 2009 installs itself on the infected computer by itself, and attempts to have the actual "program" installed on the computer by the user, after receiving payment of $49.95. However, the viruses that it claims are on your computer are nonexistent, and the real virus is what you are paying to install on your computer.



While the virus is mainly harmless to your computer, it can disable antivirus programs, thus leaving computers vulnerable to other attacks. What is actually installed on your computer after purchase may be a virus as well. Most of the damage done is financially, as the computer user has not only paid the attacker nearly $50 to install the useless program, but also has given them vital personal information, which could then be used for identity theft.



The first step towards defeating the virus is to use antivirus software such as Windows Defender or Avast. If this doesn't work, you can remove the virus manually, by deleting processes related to "sysguard" in the task manager, and permanently removing files and registry entries that are title with some variant of the "sysguard" name.



Stop Spyware Protection 2009 processes:



aazalirt.exe

seeukluba.exe

skaaanret.exe

ronitfst.exe



Remove Spyware Protection 2009 files:



Spyware Protection 2009.lnk

Uninstall Spyware Protection 2009.lnk

Get rid of Spyware Protection 2009 registry keys:



HKEY_CURRENT_USER\Software\AvScan

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “sysguardn”



How Do You Remove Spyware Protection 2009 Files?

Need help figuring out how to delete Spyware Protection 2009 files? While there’s some risk involved, and you should only manually remove Spyware Protection 2009 files if you’re comfortable editing your system, you’ll find it’s fairly easy to delete Spyware Protection 2009 files in Windows.



How to delete Spyware Protection 2009 files in Windows XP and Vista:



Click your Windows Start menu, and then click “Search.”

A speech bubble will pop up asking you, “What do you want to search for?” Click “All files and folders.”

Type a Spyware Protection 2009 file in the search box, and select “Local Hard Drives.”

Click “Search.” Once the file is found, delete it.

How to stop Spyware Protection 2009 processes:



Click the Start menu, select Run.

Type taskmgr.exe into the the Run command box, and click “OK.” You can also launch the Task Manager by pressing keys CTRL + Shift + ESC.

Click Processes tab, and find Spyware Protection 2009 processes.

Once you’ve found the Spyware Protection 2009 processes, right-click them and select “End Process” to kill Spyware Protection 2009.

How to remove Spyware Protection 2009 registry keys:



Because your registry is such a key piece of your Windows system, you should always backup your registry before you edit it. Editing your registry can be intimidating if you’re not a computer expert, and when you change or a delete a critical registry key or value, there’s a chance you may need to reinstall your entire system. Make sure your backup your registry before editing it.



Select your Windows menu “Start,” and click “Run.” An “Open” field will appear. Type “regedit” and click “OK” to open up your Registry Editor.

Registry Editor will open as a window with two panes. The left side Registry Editor’s window lets you select various registry keys, and the right side displays the registry values of the registry key you select.

To find a registry key, such as any Spyware Protection 2009 registry keys, select “Edit,” then select “Find,” and in the search bar type any of Spyware Protection 2009’s registry keys.

As soon as Spyware Protection 2009 registry key appears, you can delete the Spyware Protection 2009 registry key by right-clicking it and selecting “Modify,” then clicking “Delete.”

How to delete Spyware Protection 2009 DLL files:



First locate Spyware Protection 2009 DLL files you want to delete. Open your Windows Start menu, then click “Run.” Type “cmd” in Run, and click “OK.”

To change your current directory, type “cd” in the command box, press your “Space” key, and enter the full directory where the Spyware Protection 2009 DLL file is located. If you’re not sure if the Spyware Protection 2009 DLL file is located in a particular directory, enter “dir” in the command box to display a directory’s contents. To go one directory back, enter “cd ..” in the command box and press “Enter.”

When you’ve located the Spyware Protection 2009 DLL file you want to remove, type “regsvr32 /u SampleDLLName.dll” (e.g., “regsvr32 /u jl27script.dll”) and press your “Enter” key.

That’s it. If you want to restore any Spyware Protection 2009 DLL file you removed, type “regsvr32 DLLJustDeleted.dll” (e.g., “regsvr32 jl27script.dll”) into your command box, and press your “Enter” key.



Did Spyware Protection 2009 change your homepage?



Click Windows Start menu > Control Panel > Internet Options.

Under Home Page, select the General > Use Default.

Type in the URL you want as your home page (e.g., “http://www.homepage.com”).

Select Apply > OK.

You’ll want to open a fresh web page and make sure that your new default home page pops up.

Quoted:



THANKS A MILLION!  This really fixed the problem.  I owe you big time.  How do I get this man a team membership?  ( No I was not even looking at porn ).

Quoted:







No problem. Did you recently install an "Important" video codec? You wouldn't believe how many of these infections I remove for people around here. That program just scans for all of the variations of the trojan and automates the removal process for you.

Quoted:
Reinstall windows - get AVG or avast installed. Stop going to porn sitse, dont open spam e-mail especially if there is an attachment. Dont go to flash game sites. Buy a second hard drive, and save everything you need to keep on that hard drive, if you need to then also back shit up to an external HDD.

Quoted:

Quoted:
Its possible it could have spread, or was a modified version that it doesn't remove.  The best way to get rid of it is to manually remove it, but that isn't an option for the average computer user.  Out of the at least 100 of these infections I have removed with this tool, none of them have came back so far.