Spyware Protect 2009 is just more scamware, disguised as antispyware software.
You probably got infected with Spyware Protect 2009 through Conficker, the headline-making worm that’s infected millions of PCs. Like other scareware, Spyware Protect 2009 tells you you’re infected with imaginary threats, and then demands you use Spyware Protect 2009 to remove them. Even if you see through the scam, you’re sanity is threatened by a Spyware Protect 2009 alert.
Before you set fire to your PC to stop Spyware Protect 2009 popups, you can remove Spyware Protect 2009 for free with my instructions below. However, if you have Spyware Protect 2009, you may also have Conficker worm. Use this eye chart to see if you have Conficker worm. If Conficker blocks your access to antivirus software or sites, follow our free Conficker removal instructions.
As always, leave a comment if you have any questions about how to remove Spyware Protect 2009.
GET RID of Spyware Protect 2009
- Manually remove Spyware Protect 2009 with step-by-step instructions
- Download Spyware Doctor to automatically remove Spyware Protect 2009
- You can download award-winning, anti-badware software SpywareDoctor to easily remove Spyware Protect 2009. Want to know why I dig SpywareDoctor? Read my review.
Do You Have Spyware Protect 2009?
When you’re infected with badware — whether it’s Spyware Protect 2009, spyware, adware, a Trojan, or a virus — there are a few key symptoms. Have you noticed…
- Slow computer performance: It just takes one parasite like Spyware Protect 2009 to slow your computer dramatically. If your PC takes longer than usual to reboot, or if your Internet connection is unusually slow, you may be infected with Spyware Protect 2009.
- New desktop shortcuts or switched homepage: Badware like Spyware Protect 2009 may change your Internet settings to redirect your homepage to another site. Badware can even add desktop shortcuts to your PC.
- Annoying popups: Badware can bombard your computer with popup ads, even when you’re not online. Through these popups, you may be tricked into downloading more spyware.
How to Remove Spyware Protect 2009 Manually
Before we get started, you should backup your system and your registry, so it’ll be easy to restore your computer if anything goes wrong.
To remove Spyware Protect 2009 manually, you need to delete Spyware Protect 2009 files. Not sure how to delete Spyware Protect 2009 files? Click here, and I’ll show you. Otherwise, go ahead and…
Block Spyware Protect 2009 sites:
www.antivirus-win.com
www.antivguardian.com
www.antiwareprotect.com
www.browser-security.microsoft.com
www.os-protection.com
www.sp-protect2009.com
www.spwprotect2009.com
www.spy-protec.com
www.spy-protect-2009.com
www.spyprotect2009.com
www.spyware-protector-2009.com
www.spywprotect.com
www.spywrprotect-2009.com
www.swp2009.com
www.sys-protection.com
www.sysguard2009.com
www.sysprotect.net
Stop Spyware Protect 2009 processes:
SysGuard.exe
c:\WINDOWS\aazalirt.exe
c:\WINDOWS\dkekkrkska.exe
c:\WINDOWS\dkewiizkjdks.exe
c:\WINDOWS\iddqdops.exe
c:\WINDOWS\ienotas.exe
c:\WINDOWS\iqmcnoeqz.exe
c:\WINDOWS\irprokwks.exe
c:\WINDOWS\jikglond.exe
c:\WINDOWS\jiklagka.exe
c:\WINDOWS\jrjakdsd.exe
c:\WINDOWS\jungertab.exe
c:\WINDOWS\kitiiwhaas.exe
c:\WINDOWS\kkwknrbsggeg.exe
c:\WINDOWS\klopnidret.exe
c:\WINDOWS\krkdkdkee.exe
c:\WINDOWS\krkmahejdk.exe
c:\WINDOWS\krtawefg.exe
c:\WINDOWS\krujmmwlrra.exe
c:\WINDOWS\ktknamwerr.exe
c:\WINDOWS\kuruhccdsdd.exe
c:\WINDOWS\ooorjaas.exe
c:\WINDOWS\oranerkka.exe
c:\WINDOWS\oropbbsee.exe
c:\WINDOWS\ronitfst.exe
c:\WINDOWS\seeukluba.exe
c:\WINDOWS\skaaanret.exe
c:\WINDOWS\sysguardn.exe
c:\WINDOWS\tobmygers.exe
c:\WINDOWS\tobykke.exe
c:\WINDOWS\zibaglertz.exe
c:\WINDOWS\otnnbektre.exe
c:\WINDOWS\otowjdseww.exe
c:\WINDOWS\otpeppggq.exe
c:\WINDOWS\rkaskssd.exe
c:\Program Files\Spyware Protect 2009\SpywareProtect2009_start_setup.exe
c:\Program Files\Spyware Protect 2009\SpywareProtect2009.exe
c:\Program Files\Spyware Protect 2009\tp_starter.exe
c:\Program Files\Spyware Protect 2009\uninstall.exe
Delete Spyware Protect 2009 files:
Uninstall Spyware Protect 2009.lnk
c:\Program Files\Spyware Protect 2009
c:\Program Files\Spyware Protect 2009\gfx.bin
c:\Program Files\Spyware Protect 2009\options.ini
c:\Program Files\Spyware Protect 2009\SpywareProtect2009.exe.MANIFEST
c:\Program Files\Spyware Protect 2009\uninstall.log
c:\Program Files\Spyware Protect 2009\vbase.ini
c:\Program Files\Spyware Protect 2009\lang
c:\Program Files\Spyware Protect 2009\lang\english.lng
c:\WINDOWS\system32\vbzlib2.dll
Remove Spyware Protect 2009 registry keys:
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Spyware Protect 2009
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\uninstall\Spyware Protect 2009
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “sysguardn”
Note: In any Spyware Protect 2009 files I mention above, “%UserProfile%” is a variable referring to your current user’s profile folder. If you’re using Windows NT/2000/XP, by default this is “C:\Documents and Settings\[CURRENT USER]” (e.g., “C:\Documents and Settings\JoeSmith”). If you have any questions about manual Spyware Protect 2009 removal, go ahead and leave a comment.
How Do You Remove Spyware Protect 2009 Files?
Need help figuring out how to delete Spyware Protect 2009 files? While there’s some risk involved, and you should only manually remove Spyware Protect 2009 files if you’re comfortable editing your system, you’ll find it’s fairly easy to delete Spyware Protect 2009 files in Windows.
How to delete Spyware Protect 2009 files in Windows XP and Vista:
- Click your Windows Start menu, and then click “Search.”
- A speech bubble will pop up asking you, “What do you want to search for?” Click “All files and folders.”
- Type a Spyware Protect 2009 file in the search box, and select “Local Hard Drives.”
- Click “Search.” Once the file is found, delete it.
How to stop Spyware Protect 2009 processes:
- Click the Start menu, select Run.
- Type taskmgr.exe into the the Run command box, and click “OK.” You can also launch the Task Manager by pressing keys CTRL + Shift + ESC.
- Click Processes tab, and find Spyware Protect 2009 processes.
- Once you’ve found the Spyware Protect 2009 processes, right-click them and select “End Process” to kill Spyware Protect 2009.
How to remove Spyware Protect 2009 registry keys:
Because your registry is such a key piece of your Windows system, you should always backup your registry before you edit it. Editing your registry can be intimidating if you’re not a computer expert, and when you change or a delete a critical registry key or value, there’s a chance you may need to reinstall your entire system. Make sure your backup your registry before editing it.
- Select your Windows menu “Start,” and click “Run.” An “Open” field will appear. Type “regedit” and click “OK” to open up your Registry Editor.
- Registry Editor will open as a window with two panes. The left side Registry Editor’s window lets you select various registry keys, and the right side displays the registry values of the registry key you select.
- To find a registry key, such as any Spyware Protect 2009 registry keys, select “Edit,” then select “Find,” and in the search bar type any of Spyware Protect 2009’s registry keys.
- As soon as Spyware Protect 2009 registry key appears, you can delete the Spyware Protect 2009 registry key by right-clicking it and selecting “Modify,” then clicking “Delete.”
How to delete Spyware Protect 2009 DLL files:
- First locate Spyware Protect 2009 DLL files you want to delete. Open your Windows Start menu, then click “Run.” Type “cmd” in Run, and click “OK.”
- To change your current directory, type “cd” in the command box, press your “Space” key, and enter the full directory where the Spyware Protect 2009 DLL file is located. If you’re not sure if the Spyware Protect 2009 DLL file is located in a particular directory, enter “dir” in the command box to display a directory’s contents. To go one directory back, enter “cd ..” in the command box and press “Enter.”
- When you’ve located the Spyware Protect 2009 DLL file you want to remove, type “regsvr32 /u SampleDLLName.dll” (e.g., “regsvr32 /u jl27script.dll”) and press your “Enter” key.
That’s it. If you want to restore any Spyware Protect 2009 DLL file you removed, type “regsvr32 DLLJustDeleted.dll” (e.g., “regsvr32 jl27script.dll”) into your command box, and press your “Enter” key.
Did Spyware Protect 2009 change your homepage?
- Click Windows Start menu > Control Panel > Internet Options.
- Under Home Page, select the General > Use Default.
- Type in the URL you want as your home page (e.g., “http://www.homepage.com”).
- Select Apply > OK.
- You’ll want to open a fresh web page and make sure that your new default home page pops up.
Spyware Protect 2009 Removal Tip
Is your computer acting funny after deleting any Spyware Protect 2009 files? I recommend using a program like File Recover from PC Tools. File Recover saves deleted files that otherwise can’t be recovered by Windows operating sytem.
Want to save time finding Spyware Protect 2009 files? Download Spyware Doctor, let it find the Spyware Protect 2009 files for you, and then manually delete Spyware Protect 2009 files.
How Did You Get Spyware Protect 2009?
Wondering how Spyware Protect 2009 ended up on your PC? If you’re infected with Spyware Protect 2009 or other badware, perhaps you were using…
- Freeware or shareware: Did you download and install shareware or freeware? These low-cost or free software applications may come bundled with spyware, adware, or programs like Spyware Protect 2009. Sometimes adware is attached to the free software to “pay” developers for the cost of creating the software, and more often spyware is secretly attached to free software to harm your computer and steal your personal and financial information.
- Peer-to-peer software: Do you use a peer-to-peer (P2P) program or other application with a shared network? When you use these applications, you put your system at risk for unknowingly downloading an infected file, including applications like Spyware Protect 2009.
- Questionable websites: Did you visit a website that’s of questionable nature? When you visit malicious sites that are fishy and phishy, badware may be automatically downloaded and installed onto your computer, sometimes including applications like Spyware Protect 2009. I recommend you use Firefox web browser, if you don’t already.
Understanding Spyware Protect 2009
If you’re infected with Spyware Protect 2009, you should know what you’re fighting. I’ll explain some definitions related to Spyware Protect 2009.
Spyware Protect 2009 May Be Rogue Anti-Spyware
Rogue anti-spyware refers to anti-spyware/antivirus software of questionable value. Rogue anti-spyware may not be proven to protect your computer from spyware, may popup fake alerts or create many false positives about your PC being infected, or may use scare tactics to try to get you to purchase the application. Rogue anti-spyware software may be installed by a Trojan, come bundled with other software, or install itself through web browser security holes. While it is fairly rare, some rogue anti-spyware is created and distributed by known spyware or adware companies, and the rogue anti-spyware may install spyware or adware itself.
Often when you’re infected with rogue anti-spyware like Spyware Protect 2009, you’ll see a false popup security alert like this:

Rogue Anti-Spyware Tactics
Typically, rogue anti-spyware such as Spyware Protect 2009 has one or more of the qualities listed below, which is why rogue anti-spyware is considered anti-spyware software of questionable value.
- False positives/fake alerts: Rogue anti-spyware may produce a large number of false positives or use fake alerts, noting that your computer is infected with spyware parasites or other threats that do not really exist.
- Copycat looks: Rogue anti-spyware may copy the look and feel of other legitimate or rogue anti-spyware applications. Often, rogue anti-spyware applications may appear as close clones of other rogue anti-spyware software.
- High pressure marketing: Rogue anti-spyware may use scare tactics or other aggressive advertising and marketing tactics to try to trick you into buying the rogue anti-spyware application. Often, rogue anti-spyware may produce false positives and fake alerts about your computer being infected.
- Poor detection/scan reporting: Rogue anti-spyware may produce poor reports when it scans your PC. For example, rogue anti-spyware may say your computer is infected 11 parasites, but not specify which spyware parasites or what type of parasites. Rogue anti-spyware may also report that your PC is infected with SafeAndClean, but not tell you which related files, DLLS, etc. were found on your computer.
- Weak scanning/detection: Rogue anti-spyware may not only poorly report on computer infection, but rogue antispyware may also poorly scan your PC. Rogue anti-spyware may skip over important folders and files of your computer that should be scanned to detect spyware.
Did Spyware Protect 2009 use these tactics to trick you into buying Spyware Protect 2009?
Spyware Protect 2009 May Be a Trojan
Trojans install themselves secretly onto your computer, most often through your downloading a simple email attachment (often Trojans pose as harmless pictures). Most Trojans are able to gain complete control over your PC after installation. With this control, the Trojan and the hacker behind it may change your system settings, delete important files, steal your passwords, and watch your computer acitivity.
Infection Methods of Spyware Protect 2009 and Other Trojans
Most Trojans infect your computer by tricking you into launching an infected file. This poisoned file could disguised as a small file, such as a jpeg or other email attachment, or it might be downloaded via a website or FTP.
- Email: Your PC may be infected with a Trojan when you download infected email attachments, or sometimes even when you simply open an email. Many Trojans exploit security holes in Microsoft Outlook. You may be able to reduce your chances of getting infected by a Trojan by using a spam-blocking software.
- Websites: Your PC may be infected with a Trojan when you visit a rogue site. Many Trojans exploit security holes in Internet Explorer web browser so that by simply visiting a website you may unknowingly download a Trojan.
- Open ports: If your computer runs programs that provide file-sharing functions – such as AOL Instant Messenger (AIM), MSN Messenger, and more – you may open your computer up to vulnerabilities. Using file sharing through these applications may create a network that gives attackers the opportunity to remotely access your computer.

Traduzca al Español
Übersetzen Sie zum Deutsch
Traduisez au Français
Traduca ad Italiano
Vertaal aan het Nederlands
Μεταφράστε στα ελληνικά
Översätta till Svensk
ترجمة الى العربية
中文翻译
한국어에게 번역하십시오
日本語に翻訳しなさい
Traduza ao Português
Переведите к русскому
Until I did the step of stopping the process (on mine sysguard.exe) I couldn’t take any other step to fix.
Going the route of run>taskmgr.exe decribed here.
I had a few processes that I identified by first doing a search and then finding the*.exe files that were installed at the the hour and minute my computer was infected.
I then used Spyware Doctor to clean up the mess (from download.com one day free trial)
Your search for spyware tools ends here!
Spyware is not only annoying, but also a threat to your personal security. Spyware programs can be installed on your computer without you ever finding out, so you need to regularly search for them using reliable software.
The most important thing is to find out which spyware remover programs you should use.
click on my name to view the Top 5 Spyware Remover Programs.
Tried to delete the files and still did not work. So we went into SAFE MODE and selected to run computer in SAFE MODE ONLY and then at the sign in screen it asks if you would like to continue in safe mode OR go back to the last restore date. Easy as pie: It lets you go into the restore mode and you can pick the restore date. Computer will restart and will be rid of the virus. Then block the web sites listed on this site to prevent future attacks.
You also may want to change your Internet Options>Connections>Lan Settings back to “automatically detect settings” since AvNet appears to have moved mine over to a proxy, which got deleted by the spyware remover.
I just got rid of spyware protect 2009 . But my browsers were still blocked. I ran a hijackthis scan and found this entry:
“HKLM\System\CCS\Services\Tcpip\..\{22E235F6-3776-4F41-9CD7-AF722B68C258}: NameServer = 77.74.48.113″
I deleted the entries (yes more than 1) and my browsers were restored to full function again. Just something to look for
Taylor,
I tried deleting the WINDOWS\sysguard.exe (and the prefetch file,too) but it yelled at me saying it could not delete that file.
Also, system restore doesn’t work. And went back a MONTH! So, I know it’s that bleeping virus! UGH!
I’m going to try downloading from a clean computer. And creating a NON-admin profile for Internet use… great idea.
Panda can’t kill it, by the way.
Sighs,
Reverend Su
Ryan,
I thought it was from Microsoft, and DID pay for it! So now they have my CC info, too. The Spyware Protect 2009 may stop working after a day, and if you uninstall it, another version called Anti Virus PRO pops up the next day!
Quit calling people stupid. It’s not helpful and only diplays a lack of character. Be your BEST self.
Thanks,
Reverend Su
my laptop got a trojan horse virus. my internet is running half as fast, can you help me fix it?
Hey there,
I did what Kate said but it didnt work. stop the alerts but when you turn your computer on again it will come again. Its better if you download anti-malware it will delete it completely because even if u restore your system the Spyware Protect 2009 will remain in your documents…..so try it on. =)
Amelex
well 4 does how restore your computer make sure if you remove it completely because I did that and then i downloaded anti-malware and still found some trojans. So make sure its easy to download and free.
thanks, Felix =D
Testing
hey..i had the same problem so i tried what JB said but i could not delete the iehelper.dll so y tried to restore my system like Bob said and it works perfectly. i do not get any more alerts but how can i make sure if i delete completly?
thanx in advance.
zaira
Thank you Anne! We were getting stump’d by this malware and the idea to go through Firefox to get Malwarebytes was great! It also was able to clean up this crap :D
What is the quickest & easiest way to get rid off this thing? I did searches for the programs listed above, but it came up empty. Any suggestions??
Get Malware bytes downloaded to a clean computer. Update it and then put on a flash drive. Rename the mbam_setup.exe to something else IE: cat.exe. Run the setup from the flash drive and when it shows the install location change any names containing Malware bytes to something else like “dog”. No quotes. Do not let it install any quick starts “shortcut icons” at all. When it finishes check launch and uncheck update. It may take a few seconds for it to start. Choose your c: drive and do a full scan. This should work.
I got rid of it by just deleting c:/WINDOWS/sysguard.exe
and all references (2) to sysguard.exe in the registry.
Thanks you fir the good advice.
When I got the virus I called (Norton) they are suppost to provide my virus protection.
They adivsed me for $99.00 they could direct me on how to remove it.
So I followed Kate’s advise about about going though task manager and it worked fine Thanks Kate
As far as Norton your as bad as the scum that sent out the virus.
Thanks again Kate!!!
THANK’S!!!!!!!!THANK’S!!!!!!!!!!!!!!!!!!!!!!!!!!
I wish you all good luck with this thing. I will have to buy a new hard drive. My computer doesn’t even turn on. I tried with the Re-installation CD but nothing happened.
Hi I tried different ways to resolved the issue and the system resotre is the one works, thank you all for sharing info
The information on here seems to be working, but I won’t know until the system restarts. I’m cleaning this off of a college network. Anyone know if this thing plants itself onto flashdrives? I don’t want to infect my super expensive home computer with a college virus – AGAIN. Thanks.
I only found “Avscan” registry key, and “syguard.exe” under processes. Deleted both and seems to have done the trick.
Hi….I think I removed all the files already but I am unable to login to anything on the internet, such as logging in to my emails and other logins. Has anyone got this problem and resolved it? Please let me know…I am frustrated this thing. Thank you in advance.
My work promotes and swears by Symantec Endpoint Protection. It did NOT see it at all!
I removed it manually.
Thank you for providing the instructions!
Bakshara
Do Ctrl+Alt+Del
Click on Task Manager’s Process tab,
Look for, and stop:
SysGaurd.exe or SysGuardn.exe
you should be able to download & install Malwarebytes once the proecess has been stopped.
2 Additional files I found in my pc:
C:/windows/prefetch/sysguard.exe
I found another one at a similar location as that above.. I dont think it was an exe file however just use the “search” option in the start menu if you have windows and search under “all files and folders” for sysguard.
You should find it.
Also I found another registry key searching that way as well.
Do a search in the registry by hitting edit>find
then type sysguard or sysguardn or avscan
sorry cant remember which it was
Hope this helps..
I am able to manually remove the ’software in my registry editor, but it will not stay off. when I reboot my computer, it returns. I am not sure what I am missing.
thank you so much for this information that spyware protect 2009 was bugging me it kept saying ”threat detected” and all that and as soon as i read the ”registry keys” and followed its instructions it got rid of it i was glad
If Spyware Protect 2009 is blocking your antivirus software from launching, you need to disable everything in msconfig startup, or use Safe Mode with networking.
Unfortunately, this problem is very hard to fix, and it can be faster to just format and reinstall Windows, then try and repair the damage.
Let me know how else I can help.
Malwarebytes works. I got rid of the Spyware Protect 2009. Just download it from C-NEt and run it.
If you remove the registry entries first, then reboot, you should be able to delete the exe files manually. This one is not as hard as some malware to remove.
Thanks to all the suggestions for Malwarebytes‘ download from Cnet. It fixed my problems. Here’s a suggestion: download the program on a second computer (work laptop, etc), transfer w/ a USB storage device and load that way if you cannot access the internet to download.
If you can’t find it in processes in task manager, just run spyware protect and open task manager, and click applications. Then just end that program. And just to let you know, I Googled a little bit and I found that(I believe) Blue Gravity Communications created it. And Magic Software Inc. didn’t make it.
Successfully removed Spyware Protect 2009 by getting free dowload of RemoveIT Pro 4 SE (Google it) onto a CD using a not-infected computer and putting CD into infected computer and quickly booting RemoveIT up. This was after unsuccessfully trying same with MalawareBytes which wouldn’t boot. Downloading these directly onto infected computer didn’t work either. Couldn’t run them. RemoveIT did just that.
Thanks Ann for the link to Malwarebytes.
I have just removed it from my pc.
And come back in here to leave comment.
It seems now my pc is ok.
Thanks again.
The system restore worked great for me.
System restore fixed it., Thanks guys..
I already removed the malware, but Internet Explorer always shows “internet Explorer cannot display the webpage” whenever I go anywhere, so I can’t download anything.
Any help?
Where I work, I see all kinds of problems. And that’s a good thing, because the more challenges you have: 1) the more you learn and 2)the less likely it is you will be discharged.
Spyware Protect got onto a user’s laptop, since he takes it home, and connects to the internet by any available means. I got to look at it today, and it was like deja-vu all over again: Very similar to internet anti-virus, which was a scam to bilk you out of $40 for software that didn’t do diddly. Same thing here, they set the thing up to create its own crisis: IOW even the “virus” files it detects are bogus. These can be found using the list of files. Caution should be exercised with respect to which PROFILE you use when browsing. Use one without admin permissions, and at most Power users (In XP pro). The more restricted your profile is, the less likely it will be that this nonsense can “worm” its way onto your hard drive.
Could not agree more. Facebook is all the rage, everyone else is enjoying it with seemingly no problems but apparently I can’t. It seems to be the gateway for me for the “spyware protect 2009″ virus.
Thanks Ann, I downloaded Malwarebytes and it worked.
P.S. I have full McAfee suite installed as well as Malwarebytes. Still got through.
I’ve gotten this a couple of times and seems the only way to truly be rid of it is to wipe the slate clean. Paid a couple times to have it removed, after 2 virus-free days, it’s back. This time it started while I was playing Scramble on Facebook. Has anyone else had problems with the games on Facebook?
I had the spyware 2009 quarantined, but could not get the pop up to stop. I followed the instuctons to go to help and support on the start menu, then to tools, then to restore to a previous time…pop up gone. This only works if the virus was not initiated and infected in the system.
I have McAfee and I have tried finding the file to delete it but it cannot find it! I want to get rid of this thing! Damn Facebook–I am usually so careful but livesocial looked fun and all of my friends used it with no problem.
To remove this app. Press control+alt+delete. Then look under processes. Find sysguard and end the process. Then quickly go to your start menu. Then go to search. Select all files and folders and local hard drive. Type in sysguard in the search bar. When it displays delete the file. Then your spyware protect 2009 problems are over. You have to end the process then do the search and delete quickly. If the process has time to restart itself it will say the program is in use and won\’t let you delete it.
TY VERY MUCH, WORKED GREAT, IT WAS DRIVEN ME CRAZY THERE FOR A WHILE
Tazzy’s advise worked super, ty!
Malware bytes worked perfect!! Thanks so much.
Also, thanks to all those who contributed on this site and this thread. Together, we can defend against these internet terrorists.
JB!!! Thanks!!!! I followed your simple instructions and so long spyware!
my computer wont even restart normally!!! HELP!!!
I found the simple solution was to open task manager click process then stop sysgard. Then I opened the control panel and the C drive/windows folder/ then sysgard in that folder and delete it then emptied the recyle bin and it was off. You can get it off but you have to turn it off thru the task manager before you can acces it to get it off. Hope that helps
This Malwarebytes Anti-Malware program worked perfectly and removed Spyware Protect 2009 and other infections.
http://www.411-spyware.com/Malwarebytes-anti-malware-review
If you can’t open a page on the infected computer because all pages won’t load due to the Spyware Protect 09, try typing the above link into the URL several times if you need to. Quickly click on the download link. Installs easily, then perform a full scan (takes about an hour and a half) and remove all threats. When you reboot, it should be gone!
:)
Finding that the Spyware Protect 2009 had taken hold in my system. I promptly got on the horn with my Bestest Buddy which happens to be a “Geeks Geek”. believe me that is not an insult to him…
Over the phone for what seemed like hours,(actually was 5 hours). He talked me through every option that he could figure out. And half way through the ordeal he actually told me that he’d call me back. As it was already about 11:45 pm I figured that he was in a Smart retreat. But I got a call 15 minutes later and he had gotten dressed and gone to work where he’d fired up a desk top unit identical mine and a couple of laptop units. Some time after 03:00 am he admitted that he was out of ideas. And for a retired Intel support Tech to say the words to a non tech type person is a mile stone in frustration. I had never seen or heard of one that he couldn’t fix or at least figure out. But since I had made a full set of restore disks it was the obvious easy out.
It took me about three hours the next day to restore the entire hard drive and reload all of my programs. At about 4:00 the next afternoon he rolled up with his work trouck. On A Sunday mind you. And he came in to see me just doing the last scan and loading a few songs on I tunes.
At the last scan I tightened up the security and Low and behold Spy Hunter Suite 3 had caught Spyware Protect 2009 back on and attempting to dig in again. It was removed and have had no problems since. And not unless he reads this soap box address will he ever find out that I didn’t clean it all out myself.
But that is your option don’t try to partial restore as Spyware Protect 2009 digs in far enough to stick around for a partial restore. Get the anti virus in and working as soon as possible. and wonder why you sat and cursed the low life slime that did it to you and every one else.
So you might want to take a few weeks to try to get in to clean your registry and say I did it… But I spent a few hours and its good as new. And backed up into a 1 Tb external hard drive now to make it even more easier.
Sorry I couldn’t get a quick fix to the masses but “fore warned is fore armed”. Back it up and segregate the back up from the system. And Scan frequently.
Have a wonderful day.
Hi. Im having difficulties with Spyware Protect. It won’t let me access any websites, it keeps making a bubble at the bottom of the screen alert me about a fake virus and my computer is at risk. So can someone please help me. Step by step instruction. I am only 13!
Thanks Phil. Great tip. I found the fake .exe and deleted it and the fake processs disappeared from my screen.
Spybot search and destroy Works!!! You can download it for free
Cmon people, just get the latest Spybot Search & Destroy (1.6.2). The new scanner is very fast, and kills this one dead. Some of you unable to reach certain websites need to check your hosts file (c:\windows\system32\drivers\etc\hosts) in Notepad and remove the rogue entries blocking access to some sites. Others need to see if they also have the Conficker worm by visiting this site: http://tinyurl.com/cfchecker and reading up on the infection. Here’s a tip, install Spybot Search & Destroy on a good PC, and update its definitions. Then burn the program folder (C:\program files\Spybot – Search & Destroy) onto a CD or put it on a lockable USB thumb drive (lock it). Spybot S&D will run just fine and remove the nasties.
I got hit this morning (4/13/09) with Spyware Protect 2009. What a pain. I opted for Bob Smith’s suggestion to do a system restore and used March 31 as my restart point. April 1st was the date that Conficter virus was supposed to hit so I thought going back before that would be a good idea. So far everything is fine. The Spyware Protect 2009 icon is gone from my screen as is the pop-up.
step 1 Create another user within the Administrator login.
Step 2. try to follow all steps.
okay so i also deleted the sysguard.exe and the fake spyware 2009 pop ups seem to have stopped. does this mean the virus is out? or is the virus still infecting the computer…just with out the annoying pop ups? someone please let me know.
I used Malwarebytes and it removed this pesky problem. $24.95 but it was easy.
I used the manual method to make the corrections. So far it is working. It looks like the c:\windows\sysguardn.exe file came from a country which uses a Russian like alphabet. It would not surprise me if they want people to use their credit cards so they can get the information. What crooks.
Bob Smith
Thank you soooo much for the free, quick fix to the “spyware protection 2009″ problem and it’s a life saver.
Try his method first before any other time-consuming software/download. Here’s a recap of “his” ideas in case you can’t find it:
Bob Smith
Mar 3, 2009 | Reply
I just had the same problem with Spyware Protect 2009…two suggestions for you here. Depending on what type of computer you have, you can do a System Restore and restore your computer to a previous date, when your computer was running optimally. I just did this with my HP – Clicked ‘Start’, then ‘Help & Support’, then ‘Tools’ then ‘System Restore’. I selected a date five days earlier. Bingo, Spyware Protect 2009 was gone! Look at your computer manual or “help” file, and search for System Restore. This should do the trick. If worse comes to worst, you can always reformat your hard drive. Be sure to back up and documents, programs of files you want to save, by putting them on a CD or disk of some sort. Hope this helps! – Bob Smith
i just wanted to say
thanks. Spyware Protect 2009 is out and about and almost got me.
I used Malwarebytes with great success! Much easier than trying to figure it out on my own. Plus it managed to hide itself quite well.
I used spyhunter 3 and it worked, Thank you sooo much!!
I tried to remove it with Spyware Doctor but they are not free so finally uninstalled without removing Spyware Protect 2009 and looking for something else,
This thing is a beast to get rid of. I was blocked out of everything including system restore and even froze up on the welcome screen. In my opinion, Spyhunter3 is just as bad as this spyware protect 2009 crap. It tells you what the problem is but yet wants your money to fix it. The manual remove method only found some of the instances and the .dll file could not be deleted. This sucks.
My “Spyware Protect 2009″ disappered by itself after a few days but I still get unwanted web adresses in my history list.
These web sites can’t be seen on the screen but they can be heard on the speakers.
How do I stop this?
MalwareRemovalBot is another scam. It is clearly not free. Don’t fall for it. It makes me pretty sure that this entire page is a scam.
this comment is for jim^^^,
the whole purpose of removing this from your system is to remove it without paying for it. you probably could have just paid for the spyware protect 2009 and then just uninstalled it after you paid for it. dummies. its very simple read the manual instructions on this site, if you cannot follow simple instructions then i suggest buying a recovery disk from a number of different websites that offer your specific software for your make a model computer. finally if you cannot figure out how to do either one of those options,i would just throw your computer away, in my opinion your not eigible to comprehend how a computer works so there is no point in using it any longer.
Not true. I had firefox with bright house and Spyware Protect 2009 infected it completely. I had to totally restore the system to get rid of it.
I used spyhunter to remove spyware protect 2009, and at first it seemed to work. However, my system restore and defrag capabilities weres till disabled and my internet would still send me to random sites. So even if it seems that anti-spyware has removed “Spyware Protect” it’s still very much on your computer. I haven’t found out how to repair any of these issues though.
Everyone had a lot of great suggestions, and I appreciate it, but none of them worked for me. After about 6 hours trying to figure this out, I ended up purchasing Spyware Doctor and I must say that did the trick. After 6 hours, for $29.95, it was worth it. One thing that has ahppened afetr everything was cleared up si every time I go to do a search in Yahoo, it goes through ToseekA? Does anyone out there know what the hell this is and how I can get rid of it? It does not offer the same quality of search and connection to the website I am looking for as Yahoo. Any help is appreciated.
Hi, everyone. Malware seemed to work for me, as well. Except, I am still not able to access System Restore. So, I am wondering if anyone knows what to do to get rid of the last few traces that are hidden, obviously.
To Bob Smith: Thanks for the suggestion! It worked I went back a few days and it works fine but the only problem is when when I restored, mcafee isn’t protected now. BUT THANK YOU SO MUCH!
Thanks a million. It sailed passed my updated Norton but Spyhunter3 killed it, almost! After using Syphunter3 I had to knock out by hand SYSGUARD.EXE-0915AC98.pf and irhelper.dll. Just follow the manual instructions here and all will be well. For those interested I got the bug from a genelogy web site.
Any suggestions for getting around if System Restore will not work?
Bob’s solution works.
Try system restore. I just went back one day and everything is works fine.
Even if you all have removed the Spyware protect 2009 crap, it leaves behind a virus with a different name that is much harder to remove and detect. It reroutes search links and disables the system restore.
My computer won’t even do the system restore . . . I hate this virus!!! I’ve tried everything!
I can only get to applications in Safe Mode. If I try anything else, I just get a black screen. Also, the Malwarebytes won’t do anything in Safe Mode. It thinks for a second and then NOTHING!! I tried the System Restore, and nothing happens. I get to select a date, then Next, I read all the warnings, click Next, and NOTHING!!!
Any suggestions???
You can START>RUN>SEARCH for sysguard.exe. You should find it here>>>
C:\WINDOWS\Prefetch
delete the file with the name SYSGUARD…
and here>>>
C:\WINDOWS\sysguard.exe
remove that file as well.
You may also find it using start>run>msconfig startup tab – sysguard.exe
disable it there, but do the other 2 first. It may be gone @ next start up.
Good luck.
Awil Avast found it too.
The spyware protect 2009’s popups totally pissed me off. Thanks to Bob Smith’s suggestion of system restore. It worked for me. Try it out.
Hi Ravi, I followed your input, it worked like charm. thanks for sharing your work and thought.
GV
I’m infected with spyware protection 2009 which Malwarebytes you used it. is it freeware or pay service
Hi
I had the same problem with Spyware Protect 2009. I came to this site looking for a solution and I found it. The Malawarebytes did it for me. I went on another computer saved it to a flash drive and transfered to the virus computer it worked like a charm. Thanks alot guys.
I followed bob smith’s advice and restored my computer to a previous timepoint. I encountered some of the same problems others had: no way search and delete the parent file and no way to use the internet to download Malwarebytes. Restoring the computer to a previous timepoint took 1 minute.
Here is the easy and free step to take out Spyware Protect 2009 on your computer. I had this virus and I try everything to take it out but no other program works. Trust me.
1. go to “Start”
2. click on the “Help & Support”
3. go to “Tool”
4. Click on “System Restore”
5. I Slected the date 2 days ( but choose what is ever date is best for you)
6. Then restart you computer, Bam the virus is gone.
Thank u for your help i worked i have.gotten bugs like this several times and this site is a life saver is their any way to prevent this from happening again. It seems to happen alot to me becaise i use mu computer for watchong tv shows any help would b nice. Thank you Jared
Wowww! What a nightmare. My fiance’ just had a computer built and by the time we hooked it up the pop-ups started! Being that I am more familiar with computers than he is (not to mention much more patients too) I waited until he left for work and I started looking for answers. Thank you so much JB! I tried finding all the files and so on but couldn’t get them all. Thanks to booting in safe mode and following your directions it was a blessing! Yes I did pray a bit too. I would love to get a hold of the person who started Spyware Protect 2009 and shoot them between the eyes. Once again JB you helped make my household a peaceful one again.
This program did not get rid of the annoying spyware protection 2009 virus! I cannot get rid of the thing!!!!
Malware bytes won’t start / run? Try to rename the the executable for it. Rename (search for it) mbam.exe to something.exe and then try to run it. This finally got Malware bytes running in safe mode for me.
One more thing I use Firefox not IE . What should I do to get my computer back to normal. Plz show me how to do it. Thanks
I also tried to search iehelper.dll in my computer but the only one I found was my Adore file. Plz help.
Hi
I already delete it but still can not open Malwarebytes ( I have this software in my computer before I got that stupid spyware) . It block any kind of software that I try to download to kill it. I also can’t get into some website. Help
I had to was sickened by the bug as well as the rest i am not sure if it gone but i can tell you the pop ups have stopped and i have been able to run all of my programs as i was before. What i did if you have access to another computer download AVG 8.0 virus scan as well as stop zilla and run them both like crazy i would just installing them on a thumb drive and then running them as much as possible eventally you will get it all. the only thing is finding the real stop zilla because most of them want you to pay for them but there is a free one out there good luck trust i have a been a solid two days trying to fix the thing.
Do not pay for any software to remove this stuff that advertises removing it by name, most seem to be some sort of scam. At least google the recommended removal names and read other reviews of them first. I didn’t find any that were squeaky clean.
Zone Alarm Pro will quarantine the trojan that installed it off a simple spyware scan.
DO NOT have Zone Alarm Pro kill the program in their custom program settings or you will not be able to boot regularly and will have to boot off of F8 to a previous working config.
If you don’t have Zone Alarm Pro try the list below, if you do have it, do the list anyway.
BOOT IN SAFE MODE usually F8
1. Run|Regedit
2. Edit|Find & Search sysguard
3. Delete it where it is found
4. MyComputer|Search search for sysguard
5. It will find an .exe file called that and a .pf file that includes it in it’s name, Delete both
6. Search for iehelper.dll and delete
7. Empty Recycle bin
8. Pray and reboot
If it doesn’t work use the F8 boot and choose “use last working config” or similar. That got me back into my regular windows screen and I”m now running a virus scan to see about getting rid of this once and for all, but that will take all night.
Hope that Helps.
why do you not post this? I said your software did not remove spyware protector what a rip
After spending time debating if I should first douse my computer with gasoline, and then throw it off the top of my roof, I came to this website. I don’t know how I came to be infected with this annoying thing, but with a household that has many inhabitants, I suppose these things can and do happen. My only question, the one that kept bouncing around my revenge seeking mind, is there anyway possible to hold these creatures responsible? Like a slug leaves a trail of slime, I would think these worms leave a slime as well? The annoyance these sub-humans have caused, has led me to contemplate outrageous behavior! It’s like some a-hole burgler, entering your house every night, not to steal or rob, but just to wake you up every five minutes, and tell you that you need to buy insurance. These people need to be placed in a fifty gallon drum of raccoon excrement, with a sealed lid, and tossed to the bottom of a sewage treatment pond.
Bob,
Your idea of doing a System Restore worked great. I always knew about it, but had never had a reason to execute.
Thanks,
Tim
The spy hunter could find viruses, but did not get rid of the spyware protect 2009. The Malwarebytes seem to have gotten rid of it so far. I hope I don’t get it again. This thing is so annoying, it makes it a nightmare to use your computer. I have no idea how I got it.
Cynthia, get over it, nobody really cares if you are an unhappy person
I just had the same problem with Spyware Protect 2009…two suggestions for you here. Depending on what type of computer you have, you can do a System Restore and restore your computer to a previous date, when your computer was running optimally. I just did this with my HP – Clicked ‘Start’, then ‘Help & Support’, then ‘Tools’ then ‘System Restore’. I selected a date five days earlier. Bingo, Spyware Protect 2009 was gone! Look at your computer manual or “help” file, and search for System Restore. This should do the trick. If worse comes to worst, you can always reformat your hard drive. Be sure to back up and documents, programs of files you want to save, by putting them on a CD or disk of some sort. Hope this helps! – Bob Smith
Thank you for the help…
I ended the “sysguard” process and the spyware protect 2009 messages went away, but I still cant get out to the net to download any malware removal tools. HELP
I am having the exact same problem as Chris. The program is gone but i still cannot use internet explorer! Please Help!
Okay I have another problem. I was able to delete the spyware ptorect program. But it is still blocking some of my websites. How do I make it stop?
Ok I used the task manager and stoped the sysguard process. That took the spyware protect away. But I still cant open Spyhunter or Malwarebytes..
I have donwloaded both Malwarebytes and spyhunter..I cant get either one of them to open. I have un installed and installed them several times and they will not open. I even tried them in safe mode and nothing will happen. I cannot access the internet in regular mode. HELP!!!!!
Haha, Me 1, spyware protect2009 0. Thank you. that was really irritating.
when you oper your taskmgr.. stop sysguard… it is a fake program that came with Win auto update and hotfixes. I saw the list before I allowed the update and after the update it took over my comp!!!!!!!
Like Lisa I cant get Malware bytes to run on my computer, or any other virus software. I couldn’t figure out how to arrange the icon by type and date added.
If you go to your C:\windows and sort by file type. All the .exe files should be together. If you this is a recent occurance, you can hover over the .exe files and it’ll tell you when they were added. Find recently added ones and delete them. It might not get rid of them completely but it gives you time, and allows you to run real spyware removal programs. The files won’t have any unique icons, just make sure not to delete old .exe files as they might be important.
I can save Malwarebytes to my pc desktop, but I’m completely unable to actually open it up or run it. When I click on ‘open’, I get the hourglass and then just wait and wait. Nothing else happens. How can I get Malwarebytes to work if I can’t open it?
I deleted svcho from my processes and it stopped the pop ups, but I still can’t get online to actually download mozilla or Malwarebytes.
I also can’t locate any of the registry keys…
This program got onto my wives desktop computer and I am trying FRANTICALLY to remove it anyway that I can! I have McAfee as a virus/spyware program on that computer that is registered through april. Does anyone know how to remove this step by step for win xp so I can try and get it off there and back online? also how do i prevent it from coming back? I cant even get firefox or the net to load on her computer now!
THANKS IN ADVANCE!
Sean
It’s not working. Spyware protect 2009 has completely blocked every website from downloading anything to remove it. And removing it manually isn’t an option because I don’t know what “key words” to look for because it’s NOT under “spyware protect 2009″ or any variation of that.
Hi All
Have had two experiences of “Spyware Protect 2009” One on a Windows XPP and another on a Terminal server.
Removed Windows XPP using ComboFix and the Terminal Server Malwarebytes. Malwarebytes seems to be the easier solution. As always keep the system updates on your system up to date.
Hi, we tried the Malwarebytes from cnet and it worked! YAY free and no more nasty Spyware Protect 2009! THANK YOU!
Hello, I just wanted to thank Anne for telling me about using Malwarebytes to remove Spyware Protect 2009…IT WORKED for me as well !!!
Download the free program and get rid of that annoying thing for good !!!
Thnx again Anne
I have firefox and this program/virus decided to infect my comp yesterday. I heard from someone if you first get signs of it all you have to do is not click anything on it and reboot your computer. And supposedly it will stop the problem. Atleast that is what I heard from a friend. Not sure if it is true. But I’m hoping this program will work on removing Spyware Protect 2009, or as I like to call it, this thorn in my side.
Spyware Protect 2009 has made it so that I’m having trouble downloading anything to get rid of it. I don’t see anything in my processes that refers to SP2009 so shutting it off is not possible unless someone can tell me what to look for. GRRRR!
I have mozilla firefox and it has been infected with spyware protect 2009 and I hesitate to download anything to get rid of it.
I downloaded spyhunter and it did not get rid of spyware protect 2009 Im a very unhappy person
I had Spyware Protect 2009 issues on my computer and I was really nervous about downloading anything to try and get rid of it. I finally downloaded Malwarebytes and it worked. Yay! Also, if you are having trouble even using the internet due to Spyware Protect 2009 blocking sites, try downloading firefox to use instead of Internet Explorer. That is what I did and it doesn’t seem to be able to mess with Firefox.