thepiratebay.org has a new virus

Advertise at AfterDawn.com

Link to us!

Private messages

Compose a private message

List of all updated threads

Threads without replies

Search messages

Monday 3.3.2025 / 23:45

Search AfterDawn Forums:

afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > thepiratebay.org has a new virus

Browse by topic

Forums

Start a new thread

thepiratebay.org has a new virus

Jump to:

Posted

Message

bizkit101

Junior Member

10. December 2009 @ 20:13

Link to this message

hey everyone i have decided to make this thread after getting the virus 2 times first of all it installs itself so it doesn't ask for a download. i havn't checked the vulnerability of any other browsers besides internet explorer.

well anyway what happens is a tray icon appears(the bottom right of your start bar-for those who don't understand) that says windows live scan 2009 or something like that. i just got rid of it a week ago and just a few minutes ago. also it affects you internet browsing capabilities even if you are connected to the internet. it says internet explorer unable to connect.

here is what i did and would recommend doing. well luckily for me i do a lot of installing of for instance google chrome. which i had just installed before the first time. it made a system restore point.

1.scan for spyware(it didn't show up in my anti-virus~CA anti-virus)
2. hit CTRL+SHIFT+ESC then go to the tab that says proccesses
3.look for "mwassysguard.exe" and/or "ugdlsyguard.exe" it came up different the second time. find it and click delete to end the processes so the virus can't run anymore.

if you are already too far into the infection hit the
START->run->tskill mwassysguard->ENTER
and start->run->tskill ugdlsyguard->ENTER

the method mentioned in step 2 might not work because it makes your computer think everything is a virus and prompts you to download the trojan anti-virus software(akwardly the only website that works).

then go back to your ant-spyware program (from step 1) and quarentine the files.

before you restart you computer click
START->ALL PROGRAMS->ACCESSORIES->SYSTEM TOOLS->SYSTEM RESTORE.
choose a restore point from before you were infected. if you do not have a restore point you might have to reformat your drive and reinstall windows(sorry).

i the actual name for the spyware is "spyware protect 2009"(akwardly~hey theres that word again)

[ + quote]

This message has been edited since posting. Last time this message was edited on 10. December 2009 @ 20:15

ID10Teror

Junior Member

11. December 2009 @ 02:01

Link to this message

check your host file I believe the sysguard variants add malicous host entries

host file
c:/windows/system32/drivers/etc/host

when you click it, it will ask you to choose a program to open with use notepad remove any entries that don't point to 127.0.0.1, I believe this is why you keep getting infected

gl

[ + quote]

ddp

Moderator

12. December 2009 @ 00:18

Link to this message

moved to correct forum as not a windows issue.

[ + quote]

Start a new thread

afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > thepiratebay.org has a new virus


		User name	Password

		Not registered yet? Register here. Lost your password? Click here.