This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

AV disabled, SpyBot doesn't run, all sorts of problems

1 min read

This thread's last reply is from January 26, 2009, 3:42 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

I think I am infected. Symptoms include:
- AV (avast) disabled, will not run
- Spybot will not run
- various malware removers will not run or install (including Microsoft's)
- ccleaner will not run
- System Restore says "cannot restore"
- Windows Firewall switched off (but I have managed to get that working again)
- cannot get into Safe Mode (I press f8, choose Safe Mode, and I get a Blue Screen)
- HijackThis does not install
All of the programs where I say "does not run" or "does not install": sometimes I get a quick flash of soemthing happening on the screen, but then it goes away; usually there is a simply a little disk activity but then nothing happens.

Please help!
We understand that you are having difficulty running certain programs, including HijackThis. However, in order for us to help you it is necessary that you provide us with a HijackThis log, and it is possible you may be able to trick the malware into letting you do this. First, download HijackThis to a clean computer, then rename it from HijackThis.exe to any other name you want, using an .exe extension, for example... YourLastName.exe. Once you have done that, burn it to a CD (preferable to using a flash drive that may easily become infected) then transfer the renamed file to the infected computer and run a scan, then start a new topic and include your HijackThis log.

Please follow the guideline at the link below to start a new topic and post your HijackThis log. If you are unable to create and post a HijackThis log, then your only option may be to reformat your computer and reinstall the operating system.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here, just be certain to rename HijackThis: >Guideline for posting your HijackThis log<