How to Remove System Guard 2009 [Removal Guide]

This guide will give you easy instructions on how to remove System Guard 2009 for free.


What is System Guard 2009? (Information)

System Guard 2009 is a fake security software which uses fraudulent strategies by displaying false or exaggerated security issues on your computer rather than any legitimate ones to coerce you into purchasing their software.


System Guard 2009 Screenshot:




Symptoms in a HijackThis Log:

O4 - HKLM\..\Run: [systemguard] C:\Program Files\System Guard 2009\systemguard.exe
O21 - SSODL: ieModule - {77C96E10-FDA7-4AA7-B318-0631C0D27DBB} - C:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\ieModule.dll
O21 - SSODL: InternetConnection - {AB6DAA8C-F726-4FDD-8B06-9537C5878612} - C:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\eewhptdpyl.dll

---

Follow these instructions to continue:

1. Please download this removal tool: Malwarebytes' Anti-Malware.

If you are having problems downloading from the link above, click here:


Spoiler:

Download from here only if you have problems downloading from the link above.

2. Extract the file and install Malwarebytes' Anti-Malware by double clicking on winlogon.exe

3. Follow the prompts. Make sure that Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware are checked. Then click finish.

4. Malwarebytes' Anti-Malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main program as shown below.

If you are having problems with the updater, you can use this link to manually update MBAM with the latest database

Spoiler:

• Malwarebytes' Anti-Malwares' latest database
  

Download the Full database to your Desktop or to your usual Download Folder and install it by double clicking the file. Make sure that MBAM is closed before installing the update.

5. Close ALL open Windows, Programs, File or Folders.

6. Make sure you are on the Scanner tab. Select Perform quick scan then click the Scan button as shown above.

7. Malwarebytes' Anti-Malware will now start scanning your computer for infected files as shown below.



8. When the scan is finished a message box will appear, click Ok to continue.

9. Click Show Results.


10. You will now be presented with a screen showing you the malware infections like shown below. Yours may look different depending on the infection you have.

11. Click on Remove seletced


12. When removing the files, Malwarebytes' Anti-Malware may require you to restart the computer in order to do a complete removal. If it displays a message stating that it needs to restart, please allow it to do so.

13. After that you can close the Malwarebytes' Anti-Malware window, your computer is now cleaned.


Malicious files assiocaited with System Guard 2009 (click):

Spoiler:

c:\Program Files\System Guard 2009
c:\Program Files\System Guard 2009\conf.cfg
c:\Program Files\System Guard 2009\mbase.vdb
c:\Program Files\System Guard 2009\quarantine.vdb
c:\Program Files\System Guard 2009\queue.vdb
c:\Program Files\System Guard 2009\systemguard.exe
c:\Program Files\System Guard 2009\uninstall.exe
c:\Program Files\System Guard 2009\vbase.vdb
c:\Program Files\System Guard 2009\quarantine
c:\WINDOWS\reged.exe
c:\WINDOWS\spoolsystem.exe
c:\WINDOWS\sys.com
c:\WINDOWS\syscert.exe
c:\WINDOWS\sysexplorer.exe
c:\WINDOWS\vmreg.dll
c:\WINDOWS\system32\winscenter.exe
c:\Documents and Settings\GeekPolice\Desktop\System Guard 2009.lnk
c:\Documents and Settings\GeekPolice\Start Menu\Programs\System Guard 2009
c:\Documents and Settings\GeekPolice\Start Menu\Programs\System Guard 2009\System Guard 2009.lnk
c:\Documents and Settings\GeekPolice\Start Menu\Programs\System Guard 2009\Uninstall.lnk
c:\Documents and Settings\All Users\Application Data\winlogon.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\svchost.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\track.sys
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\c.cgm
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\eewhptdpyl.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\ieModule.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Network\DLLs\moduleie.dll

---

If you are still experiencing problems or difficulties following this guide or require any assistance removing this malware, please post your questions in our Malware Removal forums for free help.

You have to be logged in to post questions. Registration is free. By registering you are privileged to other virus removal resources.

I have downloaded the malwarebytes removal tool but when I try to run it I loose the whole internet page and have to start over. Any suggestions?

Can you try posting us a Hijack This log?

Please download the current version of HijackThis from HERE

• Double click and run the installer.
  
• It will install to C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
  
• After installing, you should get the user agreement, press accept and Hijack This will run.
  
• Select Do a system scan and save a log file. This will open a notepad file of everything Hijack This found, copy and paste it back here.
  

This is the virus I am trying to conquer on my PC, unfortuneately it has completely taken over. Anytime I go to any virus protection site, my I.E will disappear. I can not download the Malwarebytes nor can I download the HiJack form. What else can I do?

Are you able to download HijackThis from any of the links provided here?

http://www.geekpolice.net/HiJackThis-202-Download-h1.htm

No =(

It's TDSS, if you want help awhite, please open a thread in the Hijack This log area.

I had a problem (System Guard 2009) with my PC and I solved all with the help of your forum. Thanks a lot!

Hi there i downloaded MalwareBytes but when i start to download there an error occured - error:399 or somethinglike that and i cannot start the malware, please help me

Hello tmitev23,

Seems you might have a rootkit, please start a new thread here post a HijackThis log:

http://www.geekpolice.net/virus-spyware-malware-removal-f11/

somehow an antivirus got downloaded on my computer...its called WnPC Antivirus...please help me to get it off

computeruser wrote:somehow an antivirus got downloaded on my computer...its called WnPC Antivirus...please help me to get it off

Hello,

Please read this: http://www.geekpolice.net/-t3821.htm

And post your HijackThis log here: http://www.geekpolice.net/virus-spyware-malware-removal-f11/

I ran the program and can not connect to the internet now?

Hey folks.

Found you through a search on malware removal for the bankerfox.a problem.

Windows XP, AVG antivirus.

At first it was just a nuisance. Now I can't get to the internet Am writing from a spare computer.

I've read the thread on "How to Remove System Guard 2009 [Removal Guide]". I tried downloading the recommended software to another computer on a wired network and scanning the infected computer. The program just hangs.

What should my first steps be? Many thanks in advance.

Mark

My apologies for posting this in the intro section

Hello,I'm new...I can't open any files or programs...Everything that I download,I can't install it...Anything...How do I remove System Security if I can't open or install anything?
(sorry,my english in not very good,but I need to help)...