Spyware guard 2008

[godsstigma]

Hello all,

I am fixing trying to fix a friends computer that has a nasty case of “spyware guard 2008”.

These are the things I have tried:
Malwarebytes
Vundofix
Smitfraudfix
A manual delete (reg keys included)
I have even tried to edit the files removing code to make them inoperable.

Nothing has worked so far.
I can rid the machine of this malware but as soon as I reboot its back up again.


Does any one have more ideas before I wipe the machine?

Thanks.

[kpac]

To get your PC clean, read this: http://www.computerhope.com/forum/index.php/topic,46313.0.html

Post the three logs and a malware specialist will review them.

Good luck.

[godsstigma]

Thanks,

Here are the three logs.

Thanks for the help in advance.

[attachment deleted by admin]

[CBMatt]

Download ComboFix by sUBs from one of the below links.  Be sure to save it to the Desktop.

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Close any open web browsers (Firefox, Internet Explorer, etc) before starting ComboFix.

Temporarily disable your anti-virus, and any anti-spyware real-time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.

Double-click combofix.exe and follow the prompts.
When finished, ComboFix will produce a log for you.
Post the ComboFix log and a new HijackThis log in your next reply.

NOTE: Do not mouseclick ComboFix's window while it is running. That may cause it to stall.

Remember to re-enable your anti-virus and anti-spyware protection when ComboFix is complete.

[godsstigma]

oops,

Sorry, I forgot about this post or I would have deleted it.
I was able to remove the malware my self after looking more closely at the registry.
They have also made the decision to go ahead and wipe the freakin machine.
(could have told me earlier)

anyways, thanks for the help!

-JP
 

[CBMatt]

Despite being a pain, a clean install can be a good thing at times.  Thanks for the update.