Solved Can not run Malwarebytes or Avast. (Have file called SafeGuard32.dll and SafeGuard64.dll)

[Shadowfire]

Hi, I am dealing with a bugger of a item. Can not run, install, update, or uninstall Avast. Can run not install, update, or uninstall Malwarebytes. This happened after the infection. I replace with correct Winsock LSP or can't seem to get rid of SafeGuard32.dll and SafeGuard64.dll files.

Also I noticed that in regedit - under HKEYLM > System > CurrentControlSet > services > Winsock2 > Parameters > Namespace_Catalog5 > Catalog_Entries > 000000000007 > LibraryPath - C:\ProgramData\System32\SafeGuard32.dll

and

HKEYLM > System > CurrentControlSet > services > Winsock2 > Parameters > Namespace_Catalog5 > Catalog_Entries64 > 000000000007 > LibraryPath - C:\ProgramData\System32\SafeGuard64.dll

They seem to be a part of the issue. They are in place of the original file I think for - mdnsNSP2 (Display string)

I tried to fix it running the items above.

There were other items that have been cleaned up with those programs I ran above, but I am left with something just alittle off.

Hnts I am here to see if we can get this computer back to notmal.

Thanks,

-SF-

 

[TwinHeadedEagle]

Hello and welcome to MalwareTips

This looks like business/work computer, is that correct?

 

[Shadowfire]

Hello and welcome to MalwareTips

This looks like business/work computer, is that correct?

Yes, correct this is a business / work computer in a home office.

\

 

[TwinHeadedEagle]

Please download Zemana AntiMalware and save it to your Desktop.

• Install the program and once the installation is complete it will start automatically.
• Without changing any options, press Scan to begin.
• After the short scan is finished, if threats are detected press Next to remove them.

Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.​

• Open Zemana AntiMalware again.
• Click on
  
  icon and double click the latest report.
• Now click File > Save As and choose your Desktop before pressing Save.
• The only left thing is to attach saved report in your next message.

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[Shadowfire]

I followed the steps with Zemana AntiMalware and attached file below.

Ran FRST w/ fixlist.txt following your instructions.I attached fixlog.txt as well.

Thanks,
-SF-

 

[TwinHeadedEagle]

How is the situation now?

 

[Shadowfire]

How is the situation now?

Do we know what the SafeGaurd32.dll and SafeGaurd64.dll were? Are they now not a problem?

I just rebooted. Awesome!!! The Malwarebytes loads. So far so good!!!
I have to reinstall Avast and check it as well.
I will let you know soon if I am in the clear.

Thanks,
-SF-

 

[Shadowfire]

Looks like all is well! Thanks so much for your help. You were a pleasure to work and deal with.

Thanks again.

-SF-

 

[madmax]

That fix saved my life. Searched everywhere in web, only this one worked.