Rogue Malware-Can't use Spybot

[nancygaye]

Hello,

I'm new to this forum and I have been working on this problem all day.

My PC laptop was infected this morning. I downloaded Spybot and when I start the program it just shuts down, I try to open it and it says unvalid path (I have installed and uninstalled and ran in safe mode - same thing). The program appears to be a readme file (although it doesn't show that) and I don't have privileges to change it.

I tried the suggestions from Matt in the forum and nothing works. I don't have the option under Tools anymore to view hidden files.

I am more of a MAC user than a PC user so I am really at a loss.

Thanks for any help you can provide.

nancy

I have literally been on my computer all day.

I tried to run the HJT program and I ran it and the log appeared on the screen and before I could save it, it disappeared. I suspected that it would do this so I just ran the app. So, then I saved the app and ran it again and then I got that same error saving I didn't have the correct privileges to run it. I have tried downloading Windows Defender, Windows Anti-Virus and SpyBot and it's like this "thing" recognizes that it is something that can remove it and it kills it.

All I still can view hidden files although I have tried everything recommended on various websites.

It's maddening ....

[ken545]

Hello nancygaye

Welcome to Safer Networking.

Please read Before You Post (http://forums.spybot.info/showthread.php?t=288)
That said, All advice given by anyone volunteering here, is taken at your own risk.
While best efforts are made to assist in removing infections safely, unexpected stuff can happen.




We Need to check for Rootkits with RootRepeal
Please download RootRepeal one of these locations and save it to your desktop
Here (http://ad13.geekstogo.com/RootRepeal.exe)
Here (http://download.bleepingcomputer.com/rootrepeal/RootRepeal.exe)
Here (http://rootrepeal.psikotick.com/RootRepeal.exe)

Open http://billy-oneal.com/forums/rootRepeal/rootRepealDesktopIcon.png on your desktop.
Click the http://billy-oneal.com/forums/rootRepeal/reportTab.png tab.
Click the http://billy-oneal.com/forums/rootRepeal/btnScan.png button.
Check just these boxes:
http://forums.whatthetech.com/uploads/monthly_08_2009/post-75503-1250480183.gif
Push Ok
Check the box for your main system drive (Usually C:, and press Ok.
Allow RootRepeal to run a scan of your system. This may take some time.
Once the scan completes, push the http://billy-oneal.com/forums/rootRepeal/saveReport.png button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your post.

[ken545]

Due to inactivity, this thread will now be closed.

If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a new HijackThis log with a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.