Scanguard and malware

[Heat_Sink]

I just performed a check with the Malwarebytes program and it found six PUP entries associated with something called Scanguard.
These are now all quarantined.
What is Scanguard? Where is it to be found within my computer’s programs? Should it be there at all and if not how can I can I get rid of it?

[Malnutrition]

@gus Will assist you, can you look here and post the required logs for him to review please.

[jmarket]

Hello Heat Sink, and welcome to PCHF. My name is Gus and I’ll be helping you with your computer malware problem. Everyone here at PCHF are volunteers, so please remember that we also have a life away from computers and whilst an instant response may not be possible, we will respond as soon as we can. I will be staying with you until your problem is resolved so please stay with me until given the all clear

[ul]
[li]Please take the time to read all instructions carefully as we proceed, preferably print them out or take notes for reference and checking off during the cleaning process. This is because you may at times have no internet access during some steps taken to clean your computer. To make it easier for both of us only upload any log files I specifically ask you to, and post them by copy and pasting, and not an attachment.[/li][/ul]
[ul]
[li]Please do not run any other fixes other than the ones I ask you to. Be warned that there are so called “fixers” freely available that can make changes to your system and interfere with the tools I recommend. Some of these “Fixers” can also permanently damage your system. Should your security system warn you about any downloaded fixes or tools I have recommended you can safely ignore the warning as all recommended fixes and tools have been tested as safe by us.[/li][/ul]
[ul]
[li]Whilst every attempt will be made to minimize unforeseen changes to your system, unless you’ve already done so it would be advisable to backup all your personal files separate from your system drive. In a worst case scenario your files will then be safe to restore later.[/li][/ul]
[ul]
[li]Malware removal can be very time consuming and take many steps to arrive at a successful outcome. Please stay with me until you are given the “all clear” Sometimes your system may appear as normal but because the process is incomplete may allow the system to be re-infected. Also at the conclusion of the cleaning I will help you to remove all of the tools we will have used during the cleanup.[/li][/ul]
[ul]
[li]Should any post be not responded to in a reasonable time the thread will be closed. If you’re going to be unable to respond within a couple of days let me know and I’ll do the same for you. If anything unforeseen happens and you’re away unexpectedly and the thread is closed PM Me, or a Moderator on your return and your thread will be reopened. Please do not open another thread about this current issue unless asked to.[/li][/ul]
That’s all the fine print done, now let’s get to it:thumbsup:

Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.

If you are unsure if your operating system is 32 or 64 Bit please go HERE.

Once downloaded right click the FRST desktop icon and select “Run as administrator” from the menu"

https://pchelpforum.net/attachments/icon2-jpg.112/

If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
Frst will open with two dialogue boxes, accept the disclaimer.

https://pchelpforum.net/attachments/frst-disclaimer-jpg.113/

[ol]
[li]Accept the default whitelist options,[/li][li]If the additions.txt options box is not checked please select it. [/li]
[li]Then select “Scan”[/li][/ol]

https://pchelpforum.net/attachments/frst-jpg.114/

Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.

https://pchelpforum.net/attachments/2016-08-12_152002-jpg.115/

Please COPY and PASTE the contents of those two files in your next post.

We will need a log from AdwCleaner for further information.

Please download a copy of AdwCleaner from HERE, it is important to download it to your desktop.

Once downloaded to the desktop AdwCleaner will create an icon [MEDIA=imgur]eEGkHPS[/MEDIA]

Should you receive any security warnings or your User Account Control warning appears whilst you are using this application you can safely allow AdwCleaner to continue.

Before running AdwCleaner please ensure all other programs and browsers are closed, then double left click the icon to open it.

AdwCleaner will open, click the scan button to start searching.

[MEDIA=imgur]hBYSf6z[/MEDIA]

The scan may take some time to complete, and when it has any malware found will be automatically selected for quarantining. Click the “Clean” button.

[MEDIA=imgur]ftC2WaB[/MEDIA]

After a few seconds a message should tell you your computer will now reboot. Allow the reboot.

When the computer restarts a log file will be displayed, but if its closed for any reason before copying the contents, you will find a copy of the file if you navigate to C:\AdwCleaner[C#].txt (The C denotes the Cleaning log)

[MEDIA=imgur]jr9Bx9h[/MEDIA]

Please Copy and Paste the contents of the log file with your next reply.

Your next reply should have

FRST.txt file contents
ADDITION.txt contents
ADWCLEANER [C#].txt contents

[Heat_Sink]

That is an awful lot of information to absorb Gus. Could I first have an answer to my question? What is scanguard? Looking back on logs, it has been in my computer a long time.

[jmarket]

ScanGuard is a bogus malware removal tool. You have found SOME of the files associated with it. I would urge you too follow the instructions above so we can clean all ScanGuard rubbish and other unwanted content.

[jmarket]

@Heat Sink, do you still require help with this?

[Heat_Sink]

No, please close the thread with thanks