Oy Vey! I don't know about you guys, but I am getting whalloped by end users installing spyware on their systems. The windows look very real and are very misleading so it is easy to see why they are clicking to install it. I have found that you need to login and start task manager immediatley and stop any process called (can be many things)sysguard.exe. Unless you do this, you will not be able to execute anything. You will also find that your browsers connection settings have been changed to use a proxy server so you cannot get to sites to update protection. The good news is that if you stop it and run Microsoft Defender or Forefront it is able to be removed. Here is a pic of what you will see.