Jump to content


Photo

Warning! Warning! Don't go to Engrish is funny.com


  • Please log in to reply
No replies to this topic

#1 Keith Walters

Keith Walters
  • Sustaining Members
  • 2252 posts
  • Other
  • Sydney Australia

Posted 08 July 2009 - 01:29 AM

Post #3 has a link to engrishfunny dot com.

If your virus protection is not up to date the site may install a piece of Malware called sysguard.exe on your system.
Moderators, can you please deactivate that link or add a suitable warning.

Sysguard doesn't actually harm your computer, it just copies a program called Sysguard.exe onto your C:\windows folder, and then adds it to the list of startup services. When you boot up, you then get bogus popup messages saying your computer is infected with dozens of viruses, trojans etc, and is also under a phishing attack etc.

A popup box then offers to remove all these problems, for a fee of course.
A dead giveaway is the atrocious English on the supposed Windows alert message! You can click their cancel buttons but they keep coming back, and it also keeps trying to connect you to porn sites.

Don't panic, just remember that they are only after your money, so there is no point in them trashing your computer!

If you ever encounter this problem, Spybot Search & Destroy will get rid of it, but this can be difficult because the popups keep obscuring the screen.

If this happens, first of all, remove or switch off your Internet connection. Then press alt-ctrl-delete to bring up Task Manager, then click the "Processes" tab. Towards the bottom of the list you will see "sysguard.exe". Click on that and then click "End Process" which will shut it down and leave Spybot (or whatever) in peace.

If you want to come back to this later, click Start, then "run", then type msconfig in the "open" box, then click OK which will bring up the System Configuration Utility. Click the "Startup" Tab, and uncheck "sysguard.exe". That will permanently deactivate the program.

There are other pieces of malware that work in a very similar manner
so it might be worth printing this out and keeping it handy. It's no good trying to look for cures on the net, if the program keeps trying to connect you to porn sites, which is probably the idea.

Generally, a mysterious new icon may appear on the bottom right taskbar. If you right-click on it and them click on "properties" it should tell you the name of the executable file, and then you can look for it on Task Manager.
  • 0


The Slider

Metropolis Post

Technodolly

Willys Widgets

rebotnix Technologies

Broadcast Solutions Inc

Gamma Ray Digital Inc

Wooden Camera

Rig Wheels Passport

Ritter Battery

FJS International, LLC

Glidecam

Abel Cine

Tai Audio

CineLab

Aerial Filmworks

Visual Products

Paralinx LLC

Media Blackout - Custom Cables and AKS

CineTape

New Pro Video - New and Used Equipment

Tai Audio

Gamma Ray Digital Inc

rebotnix Technologies

Aerial Filmworks

CineLab

Paralinx LLC

FJS International, LLC

Visual Products

Willys Widgets

Rig Wheels Passport

Metropolis Post

Wooden Camera

Broadcast Solutions Inc

New Pro Video - New and Used Equipment

CineTape

Media Blackout - Custom Cables and AKS

Ritter Battery

Technodolly

The Slider

Glidecam

Abel Cine