On my Sony labtop with Windows 7 I have the AntiSpySafeguard come up every time I start my computer and behind it it is all black. I have tried to end process of it and all I am left with is a black screen. Please help!
I suggest:
- Clean your temporary files.
- Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
- Use MBAM (or SUPERantispyware or even Spyware Terminator) to scan for spywares and trojans. If any infection is detected, it is better and safer to send the infected file(s) to quarantine (Chest), rather than simply deleting them.
- Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
- Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
- Clean your Hosts file (replacing it) with HostsMan tool.
- Disable System Restore and then reenable it again.
- Immunize your system with SpywareBlaster.
- Check if you have insecure applications with Secunia Software Inspector.
Specially MBAM is a good program to detect/remove rogue programs.
It is a rogue/fake security application, try MBAM as that has a good success rate in rogue removal.
If you haven’t already got this software (freeware), download, install, update and run it and report the findings (it should product a log file).
-
- MalwareBytes Anti-Malware (MBAM), On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe, right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later. - 2. SUPERantispyware (SAS). On-Demand only in free version.
Don’t worry about reported tracking cookies they are a minor issue and not one of security, allow SAS to deal with them though. - See http://en.wikipedia.org/wiki/HTTP_cookie.
Also available, a portable version of SAS, http://www.superantispyware.com/portablescanner.html, no installation required.
Also see this http://www.bleepingcomputer.com/virus-removal/remove-fake-microsoft-security-essentials-alert.
How do I get past the square AntiSpySafeguard thing and get rid of the black screen behind it and have my normal desktop come back on so I can download these programs?
I don’t know, that is why I gave the link I did.
How did you get on-line to post this topic, if you can brows then you can visit the links. Don’t save anything to the desktop when you download, save it to a folder you can access with windows explorer. Create a C:\Downloads folder if one doesn’t already exist.
I am on my older desktop computer and need the help for my labtop. When I control-alt-delete and end process hotfix.exe *32 I just found out it got rid of the AntiSpy popup but I am left with a black screen. Every time I restart that AntiSpy thing comes back up and a black screen behind it.
If you “cannot get on the internet or anything because of the blackscreen behind the antispy thing” it is pretty hard to help if you can’t access ‘anything’ on your system.
The link I gave you to bleeping computers removal instruction is pretty comprehensive and should be able to get round the black screen background and as it says print it out and download the various tools.
Other than this I haven’t any other tools that might resolve this if you truly can’t access anything on your system. You would have to try a Rescue CD which can run an AV scan from outside windows.
LiveCD - Rescue Disks http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/
I found a solution Whew!! I searched that hotfix.exe *32 and I found this website
http://www.2-viruses.com/remove-antispy-safeguard
I did the control-alt-delete and end processed hotfix.exe *32 and went to file - new task and typed in explorer.exe and my desktop and internet opened up. I then did a system restore and picked a few days ago and it is back to normal!
Since this particular beast is triggered by a fake security alert (usually Microsoft Security Essentials), do you recall having such an alert and do you also have MSE installed ?
Make sure that after the system restore you update avast and any other security software as that too would be out of date too.
The site promotes rouge software. Also, a site that tells the user to buy their product.
http://mywot.com/en/scorecard/2-viruses.com
Anyways, it is still a virus-free html source code, I just hoped you didn’t download anything off of it.
Still, it is rated clean by everything else.
Report 2010-10-09 19:59:11 (GMT 1)
Website 2-viruses.com
Domain Hash 06a3a31bbc365ff2ac81a34203b315b8
IP Address 174.132.232.156 [SCAN]
IP Hostname server.2-viruses.com
IP Country US (United States)
AS Number 21844
AS Name THEPLANET-AS - ThePlanet.com Internet Service…
Detections 1 / 17 (6 %)
Status SUSPICIOUS
Scanning site with: AMaDa CLEAN
Scanning site with: BrowserDefender CLEAN
Scanning site with: DNS-BH CLEAN
Scanning site with: Google Diagnostic CLEAN
Scanning site with: hpHosts UNRATED
Scanning site with: Malware Domain List CLEAN
Scanning site with: Malware Patrol CLEAN
Scanning site with: MyWOT DETECTED
Scanning site with: Norton SafeWeb CLEAN
Scanning site with: ParetoLogic URL Clearing House CLEAN
Scanning site with: PhishTank CLEAN
Scanning site with: SURBL CLEAN
Scanning site with: Threat Log CLEAN
Scanning site with: TrendMicro Web Reputation CLEAN
Scanning site with: URIBL CLEAN
Scanning site with: Web Security Guard CLEAN
Scanning site with: ZeuS Tracker CLEAN
http://www.2-viruses.com/remove-antispy-safeguardThe site promotes rouge software. Also, a site that tells the user to buy their product.
http://mywot.com/en/scorecard/2-viruses.comAnyways, it is still a virus-free html source code, I just hoped you didn’t download anything off of it.
What are you talking about? 2-viruses.com doesn’t promote rogue software. It is affiliated with Spyware Doctor which is perfectly legitimate anti-spyware program.
http://en.wikipedia.org/wiki/Spyware_Doctor
http://www.pcmag.com/article2/0,2817,2251725,00.asp
http://www.mywot.com/en/scorecard/pctools.com
Spyware Doctor is not free but users can choose which security product to use, can’t they? Besides, 2-viruses.com provides manual removal instructions, so you can choose to remove rogue software manually.
Also, mywot.com is lame. You know, I can leave a bad comment about avast.com very easily. I can even state that Avast is a rogue anti-virus program and what would you do about that? Nothing, because mywot.com is not reliable. It could be a great tool for added security, but unfortunately it isn’t. So, please don not confuse people. Thank you and good luck!