Hello and welcome to the WhatTheTech Forum's .

Use at your own risk: WhatTheTech forum's, does not take responsibility for any outcome of following these directions. Every computer is different, so we cannot guarante the outcome. If you are apprehensive, please post a log from HijackThis in the designated forum and let us take a look and guide you to a clean system.

This is a "self help" to remove the infection on Windows 2000, all XP and Vista.

Keep in mind this infection can be accompanied by other infections as well. We strongly suggest you Register after running this fix and posting a HijackThis log for one of the pro's to check over.


Please do not delete anything unless instructed to.

1.Click Start > Settings > Control Panel.
2.Next, open Add/Remove Programs and remove if listed:
AntiSpyGuard 2007


In case you don't have HijackThis...

* Download Trend Micro Hijack This™
Doubleclick the HJTInstall.exe to start it.
By default it will install HijackThis in the Program Files\Trendmicro folder and create a desktop shortcut.
HijackThis will open after install. Press the Scan button below.

Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a checkmark/tick in the box on the left side on these:
O4 - HKLM\..\Run: [AntiSpyGuard] "C:\Program Files\AntiSpyGuard 2007\AntiSpyGuard.exe" -AUTORUN
O4 - HKCU\..\Run: [AntiSpyGuard] "C:\Program Files\AntiSpyGuard 2007\AntiSpyGuard.exe" -AUTORUN
O4 - HKUS\S-1-5-18\..\Run: [AntiSpyGuard] "C:\Program Files\AntiSpyGuard 2007\AntiSpyGuard.exe" -AUTORUN (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AntiSpyGuard] "C:\Program Files\AntiSpyGuard 2007\AntiSpyGuard.exe" -AUTORUN (User 'Default user')
O23 - Service: ASGService - Unknown owner - C:\Program Files\AntiSpyGuard 2007\ASGServ.exe
Close ALL windows and browsers except HijackThis and click "Fix checked"


Delete these Files if listed:
C:\Windows\svshost.exe
C:\Documents and Settings\[LoginName]\Cookies\syssp.exe
C:\Windows\system32\scaner.exe

Delete these Folders if listed:
C:\Program Files\AntiSpyGuard 2007
c:\Documents and Settings\All Users\Start Menu\Programs\AntiSpyGuard 2007

Next:

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.

Post your HijackThis log here:

Please create a new Topic


More detailed information here:
http://www.bleepingcomputer.com/forums/topic114504.html