malware disables spybotsd.exe

[mj8ch]

Windows XP Home SP3 IE7
Seems to be infected with SafeGuard 2009 malware\virus (and possibly other viruses).

I've isolated and removed some of the SafeGuard files manually but the infection is still: disabling Task Manager, preventing exe's from running for A\V or malware scanners, popping up links to SafeGuard and other fake virus scanners.

The big issue is that the infection is blocking me from running Spybot as well as HiJackThis. Neither scans will run in Safe Mode either. Double-clicking on the spybot or hijackthis exe's does nothing. In safe mode, if I click Run As, I get this window - "SpybotSD.exe - this service cannot be started in Safe Mode."

Any ideas? Without being able to run any scanners - especially hijackthis - it makes it near impossible (atleast for me) to remove the malware.

Any help is very much appreciated! Thanks!

[Blade81]

Hi

Download DDS and save it to your desktop from here (http://www.techsupportforum.com/sectools/sUBs/dds) or here (http://download.bleepingcomputer.com/sUBs/dds.scr) or here (http://www.forospyware.com/sUBs/dds).
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.

[Blade81]

Due to inactivity, this thread will now be closed.

Note:If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than four days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.