Expert: Brian Benosky - 7/16/2008

Question
Hi, I was browsing through the internet, and left my desk for a couple of minutes, in the meantime my toddler decided to do some work of her own, and some how managed to start a download on AntiMalwareGuard. It disabled my Task Manager so I couldn't stop the process, and it keeps showing pop-ups, spyware warning (just redirects for me to buy some software), and is just plain irritating.
I have a windows 2000 Server OS, and it holds some applications that I can't afford to lose, or have slowed down.
AntiMalwareGuard wasn't listed on the Add/Remove Programs from Control Panel, so I manually deleted its folder contents and shortcuts, after that I went to the "Last Good Configuration Known" - didn't help. I also read on the internet to delete its registry keys , which I did too. I don't know where to look for DLL's. I also deleted the Disable TaskMgr registry key under HKEY_CURRENT_USER and HKEY_USERS, but again nothing, task manager is still disabled. I keep getting pop-ups and I get a messege that says "Server Busy", and that I should switch to the busy application and correct the problem. What's that?
It keeps showing some sort of Window's Security Center warning from the tray, redirects to some website and URL shows "about:security".
In other words, I really really need some help...what do I do the stop the pop-ups and just get rid of this thing? I hope I haven't done anything to screw up my machine.
Thank you so much.

Answer
Hello Heidi

I will try my best to help you out here.  You may wish to print out these instructions.  Please download Deckard's System Scanner (DSS) to your desktop from here:

http://www.techsupportforum.com/sectools/Deckard/dss.exe

1. Close all applications and windows.
2. Double-click on dss.exe to run it, and follow the prompts.
3. When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
4. Copy and paste the contents of main.txt in a follow up here.

After sending me the main.txt, please do the following:

1. Download Malwarebytes' Anti-Malware to your desktop from here:

http://www.besttechie.net/tools/mbam-setup.exe

2. Double-click mbam-setup.exe and follow the prompts to install the program.
3. At the end, be sure a checkmark is placed next to
   o Update Malwarebytes' Anti-Malware
   o Launch Malwarebytes' Anti-Malware
then click Finish.  If an update is found, it will download and install the latest version.
4. Once the program has loaded, select Perform full scan, then click Scan.  When the scan is complete, click OK, then Show Results to view the results.
5. Be sure that everything is checked, and click Remove Selected.
6. When completed, a log will open in Notepad.  I will need a copy of that log, and a HijackThis log (DSS should have added the program HijackThis to your computer).  Open it and run a Scan and Save a log File.  Copy from notepad that opens up after the scan.  Paste to a follow up here.