How to Remove System Guard 2009 [Removal Guide]

This guide will give you easy instructions on how to remove System Guard 2009 for free.


What is System Guard 2009? (Information)

System Guard 2009 is a fake security software which uses fraudulent strategies by displaying false or exaggerated security issues on your computer rather than any legitimate ones to coerce you into purchasing their software.


System Guard 2009 Screenshot:




Symptoms in a HijackThis Log:

O4 - HKLM\..\Run: [systemguard] C:\Program Files\System Guard 2009\systemguard.exe
O21 - SSODL: ieModule - {77C96E10-FDA7-4AA7-B318-0631C0D27DBB} - C:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\ieModule.dll
O21 - SSODL: InternetConnection - {AB6DAA8C-F726-4FDD-8B06-9537C5878612} - C:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\eewhptdpyl.dll

---

Follow these instructions to continue:

1. Please download this official version of Malwarebytes' Anti-Malware.




2. Install Malwarebytes' Anti-Malware by double clicking on mbam-setup




3. Follow the prompts. Make sure that Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware are checked. Then click finish.




4. Malwarebytes' Anti-Malware will automatically update itself after the installation, click the OK button to close that box and you will now be at the main program Window as shown below.

If you are having problems with the updater, you can use this link to manually update Malwarebytes' Anti-Malware with the latest database. Make sure that Malwarebytes' Anti-Malware is closed before installing the update.


5. Close All opened Windows, Programs, File or Folders.


6. Make sure you are on the Scanner tab. Select Perform quick scan then click the Scan button as shown below.




7. Malwarebytes' Anti-Malware will now start scanning your computer for infected files as shown below.




8. When the scan is finished a message box will appear, click OK to continue.




9. Click Show Results.




10. You will now be presented with a screen showing you the malware infections like shown below. Yours may look different depending on the infection you have.


11. Click on Remove selected.




12. When removing the files, Malwarebytes' Anti-Malware may require you to restart the computer in order to do a complete removal. If it displays a message stating that it needs to restart, click Yes.




13. After that you can close the Malwarebytes' Anti-Malware window, your computer is now cleaned from the malware infection.


To protect and prevent your computer from experiencing future threats like this, we highly recommend purchasing the FULL version of Malwarebytes' Anti-Malware with real-time protection from this link.


Malicious files associated with System Guard 2009 (click):

Spoiler:

c:\Program Files\System Guard 2009
c:\Program Files\System Guard 2009\conf.cfg
c:\Program Files\System Guard 2009\mbase.vdb
c:\Program Files\System Guard 2009\quarantine.vdb
c:\Program Files\System Guard 2009\queue.vdb
c:\Program Files\System Guard 2009\systemguard.exe
c:\Program Files\System Guard 2009\uninstall.exe
c:\Program Files\System Guard 2009\vbase.vdb
c:\Program Files\System Guard 2009\quarantine
c:\WINDOWS\reged.exe
c:\WINDOWS\spoolsystem.exe
c:\WINDOWS\sys.com
c:\WINDOWS\syscert.exe
c:\WINDOWS\sysexplorer.exe
c:\WINDOWS\vmreg.dll
c:\WINDOWS\system32\winscenter.exe
c:\Documents and Settings\GeekPolice\Desktop\System Guard 2009.lnk
c:\Documents and Settings\GeekPolice\Start Menu\Programs\System Guard 2009
c:\Documents and Settings\GeekPolice\Start Menu\Programs\System Guard 2009\System Guard 2009.lnk
c:\Documents and Settings\GeekPolice\Start Menu\Programs\System Guard 2009\Uninstall.lnk
c:\Documents and Settings\All Users\Application Data\winlogon.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\svchost.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\track.sys
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\c.cgm
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\eewhptdpyl.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\ieModule.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\moduleie.dll

---

If you are still experiencing problems or difficulties following this guide or require any assistance removing this malware, please post your questions in our Virus, Spyware & Malware Removal forums for free help.

You have to be logged in to post questions. Registration is free. By registering you will be privileged to other resources and to ask questions.

I have downloaded the malwarebytes removal tool but when I try to run it I loose the whole internet page and have to start over. Any suggestions?

Can you try posting us a Hijack This log?

Please download the current version of HijackThis from HERE

• Double click and run the installer.
  
• It will install to C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
  
• After installing, you should get the user agreement, press accept and Hijack This will run.
  
• Select Do a system scan and save a log file. This will open a notepad file of everything Hijack This found, copy and paste it back here.
  

This is the virus I am trying to conquer on my PC, unfortuneately it has completely taken over. Anytime I go to any virus protection site, my I.E will disappear. I can not download the Malwarebytes nor can I download the HiJack form. What else can I do?

Are you able to download HijackThis from any of the links provided here?

http://www.geekpolice.net/HiJackThis-202-Download-h1.htm

No =(

It's TDSS, if you want help awhite, please open a thread in the Hijack This log area.

I had a problem (System Guard 2009) with my PC and I solved all with the help of your forum. Thanks a lot!

Hi there i downloaded MalwareBytes but when i start to download there an error occured - error:399 or somethinglike that and i cannot start the malware, please help me

Hello tmitev23,

Seems you might have a rootkit, please start a new thread here post a HijackThis log:

http://www.geekpolice.net/virus-spyware-malware-removal-f11/

somehow an antivirus got downloaded on my computer...its called WnPC Antivirus...please help me to get it off

computeruser wrote:somehow an antivirus got downloaded on my computer...its called WnPC Antivirus...please help me to get it off

Hello,

Please read this: http://www.geekpolice.net/-t3821.htm

And post your HijackThis log here: http://www.geekpolice.net/virus-spyware-malware-removal-f11/

I ran the program and can not connect to the internet now?

Hey folks.

Found you through a search on malware removal for the bankerfox.a problem.

Windows XP, AVG antivirus.

At first it was just a nuisance. Now I can't get to the internet Am writing from a spare computer.

I've read the thread on "How to Remove System Guard 2009 [Removal Guide]". I tried downloading the recommended software to another computer on a wired network and scanning the infected computer. The program just hangs.

What should my first steps be? Many thanks in advance.

Mark

My apologies for posting this in the intro section

Hello,I'm new...I can't open any files or programs...Everything that I download,I can't install it...Anything...How do I remove System Security if I can't open or install anything?
(sorry,my english in not very good,but I need to help)...