Jump to content


Photo

Warning! Warning! Don't go to Engrish is funny.com


  • Please log in to reply
No replies to this topic

#1 Keith Walters

Keith Walters
  • Sustaining Members
  • 2219 posts
  • Other
  • Sydney Australia

Posted 08 July 2009 - 01:29 AM

Post #3 has a link to engrishfunny dot com.

If your virus protection is not up to date the site may install a piece of Malware called sysguard.exe on your system.
Moderators, can you please deactivate that link or add a suitable warning.

Sysguard doesn't actually harm your computer, it just copies a program called Sysguard.exe onto your C:\windows folder, and then adds it to the list of startup services. When you boot up, you then get bogus popup messages saying your computer is infected with dozens of viruses, trojans etc, and is also under a phishing attack etc.

A popup box then offers to remove all these problems, for a fee of course.
A dead giveaway is the atrocious English on the supposed Windows alert message! You can click their cancel buttons but they keep coming back, and it also keeps trying to connect you to porn sites.

Don't panic, just remember that they are only after your money, so there is no point in them trashing your computer!

If you ever encounter this problem, Spybot Search & Destroy will get rid of it, but this can be difficult because the popups keep obscuring the screen.

If this happens, first of all, remove or switch off your Internet connection. Then press alt-ctrl-delete to bring up Task Manager, then click the "Processes" tab. Towards the bottom of the list you will see "sysguard.exe". Click on that and then click "End Process" which will shut it down and leave Spybot (or whatever) in peace.

If you want to come back to this later, click Start, then "run", then type msconfig in the "open" box, then click OK which will bring up the System Configuration Utility. Click the "Startup" Tab, and uncheck "sysguard.exe". That will permanently deactivate the program.

There are other pieces of malware that work in a very similar manner
so it might be worth printing this out and keeping it handy. It's no good trying to look for cures on the net, if the program keeps trying to connect you to porn sites, which is probably the idea.

Generally, a mysterious new icon may appear on the bottom right taskbar. If you right-click on it and them click on "properties" it should tell you the name of the executable file, and then you can look for it on Task Manager.
  • 0


Aerial Filmworks

Tai Audio

Paralinx LLC

CineTape

Ritter Battery

Glidecam

Opal

Metropolis Post

Technodolly

rebotnix Technologies

Visual Products

Broadcast Solutions Inc

Rig Wheels Passport

CineLab

Gamma Ray Digital Inc

Wooden Camera

FJS International, LLC

Abel Cine

Media Blackout - Custom Cables and AKS

The Slider

Willys Widgets

Metropolis Post

Rig Wheels Passport

The Slider

Gamma Ray Digital Inc

Tai Audio

Broadcast Solutions Inc

Opal

Technodolly

Visual Products

Paralinx LLC

Media Blackout - Custom Cables and AKS

Glidecam

Wooden Camera

Abel Cine

CineTape

Aerial Filmworks

CineLab

FJS International, LLC

Willys Widgets

Ritter Battery

rebotnix Technologies