fake virus scanner

November 21, 2009 at 23:09:07
Specs: Windows XP
The virus that I believe is on my computer is the fake virus scanner. I believe it is associated with the sysguard.exe virus but in my taskmanager it is under belwsysguard.exe.

Here is what happens after turning on the computer if I dont start the taskmanager right away and end the belwsysguard.exe process. It pops up a virus scanner and a bunch of alerts just like the sysguard.exe virus does.

Ive run malwarebytes, mcafee, and windows defender and cant find the virus or get rid of it. Also, I have located the belwsysquard.exe file and removed it but it keeps coming back.

See More: fake virus scanner

Report •

November 22, 2009 at 06:30:29
These are just methods to try to determine which files are infected.

Please save this file to your desktop.


Please double click on the Win32kDiag file and post the log it produces. This log might be quite lengthy and may take more than one post to get all of it posted.

Please run RSIT.exe by random/random and post its logs.

Download random's system information tool (RSIT) by random/random from the following link and save it to your desktop.


1. Double click on RSIT.exe to launch program.
2.(Vista Users Only) Right click on the RSIT.exe icon and select "Run as Administrator" to run the program.
3. Click Continue at the disclaimer screen.
4. Your firewall may alert you that RSIT is requesting Internet access. Please allow it.
5.Once it has finished, two logs will open: log.txt<-- this will be maximized and info.txt<-- this will be minimized. Both logs will be located at C:\RSIT.exe.

Please post the contents of both logs (in separate post) in your next reply.

Report •
Related Solutions

Ask Question