Warning! Warning! Don't go to Engrish is funny.com

[Keith Walters]

Post #3 has a link to engrishfunny dot com.

 

If your virus protection is not up to date the site may install a piece of Malware called sysguard.exe on your system.

Moderators, can you please deactivate that link or add a suitable warning.

 

Sysguard doesn't actually harm your computer, it just copies a program called Sysguard.exe onto your C:\windows folder, and then adds it to the list of startup services. When you boot up, you then get bogus popup messages saying your computer is infected with dozens of viruses, trojans etc, and is also under a phishing attack etc.

 

A popup box then offers to remove all these problems, for a fee of course.

A dead giveaway is the atrocious English on the supposed Windows alert message! You can click their cancel buttons but they keep coming back, and it also keeps trying to connect you to porn sites.

 

Don't panic, just remember that they are only after your money, so there is no point in them trashing your computer!

 

If you ever encounter this problem, Spybot Search & Destroy will get rid of it, but this can be difficult because the popups keep obscuring the screen.

 

If this happens, first of all, remove or switch off your Internet connection. Then press alt-ctrl-delete to bring up Task Manager, then click the "Processes" tab. Towards the bottom of the list you will see "sysguard.exe". Click on that and then click "End Process" which will shut it down and leave Spybot (or whatever) in peace.

 

If you want to come back to this later, click Start, then "run", then type msconfig in the "open" box, then click OK which will bring up the System Configuration Utility. Click the "Startup" Tab, and uncheck "sysguard.exe". That will permanently deactivate the program.

 

There are other pieces of malware that work in a very similar manner

so it might be worth printing this out and keeping it handy. It's no good trying to look for cures on the net, if the program keeps trying to connect you to porn sites, which is probably the idea.

 

Generally, a mysterious new icon may appear on the bottom right taskbar. If you right-click on it and them click on "properties" it should tell you the name of the executable file, and then you can look for it on Task Manager.