Malware deletes SpybotSD.exe whenever it's installed

My neighbor has an interesting piece of malware on his system.

After uninstalling Spybot -a reinstall to the same area fails because it can't overwrite a write-protected copy of SpybotSD.exe. But there don't appear to be any files with that name in the target folder.

Installing to a different folder works. but when you try to run Spybot, it complains that the target file (SpybotSD.exe) is missing or protected.

I'd run Spybot to find this malware, but..... 8-}

any suggestions?
/j

Hi,

Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.

• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt
• Save both reports to your desktop. Post them back to your topic.

Download GMER here by clicking download exe -button and then saving it your desktop:

• Double-click .exe that you downloaded
• Click rootkit-tab and then scan.
• Don't check
  Show All
  box while scanning in progress!
• When scanning is ready, click Copy.
• This copies log to clipboard
• Post log (if the log is long, archive it into a zip file and attach instead of posting) in your reply.