Malware deletes SpybotSD.exe whenever it's installed

[jeffw_00]

My neighbor has an interesting piece of malware on his system.

After uninstalling Spybot -a reinstall to the same area fails because it can't overwrite a write-protected copy of SpybotSD.exe. But there don't appear to be any files with that name in the target folder.

Installing to a different folder works. but when you try to run Spybot, it complains that the target file (SpybotSD.exe) is missing or protected.

I'd run Spybot to find this malware, but..... 8-}

any suggestions?
/j

[Blade81]

Hi,

Download DDS and save it to your desktop from here (http://www.techsupportforum.com/sectools/sUBs/dds) or here (http://download.bleepingcomputer.com/sUBs/dds.scr) or here (http://www.forospyware.com/sUBs/dds).
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.


Download GMER (http://www.gmer.net) here by clicking download exe -button and then saving it your desktop:
Double-click .exe that you downloaded
Click rootkit-tab and then scan.
Don't check
Show All
box while scanning in progress!
When scanning is ready, click Copy.
This copies log to clipboard
Post log (if the log is long, archive it into a zip file and attach instead of posting) in your reply.