spybot inactivated by trojan

[juschu]

Hi all, yesterday I got about 7 times the info that the registry is going to be changed. Afterwards I got the information from windows(?) your computer is infected. I tried to make a fullcheck but spybot did not open. I looked for the .exe but it was not there anymore. I installed spybot again but the exe is still inactivated and the icon grey. What hapened to my computer? I have tried to start spybot in the secured mode but it doesn't run. Does someone know any solution?

[md usa spybot fan]

juschu:

... Afterwards I got the information from windows(?) your computer is infected. ...

Most likely the massage was not from Windows but from the infection recommending that you download (and pay for) something to get rid of the problem.

I recommend the you post in the Malware Removal forum and have someone take a look at your system.

If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log:

• "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance).

After you have completed the required scans (without the Spybot scan since it won’t run) and produced the requested logs, start your own thread in the Malware Removal forum, making sure to post the HijackThis log produced from the above instructions.

[juschu]

juschu:


Most likely the massage was not from Windows but from the infection recommending that you download (and pay for) something to get rid of the problem.

I recommend the you post in the Malware Removal forum and have someone take a look at your system.

If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log:

• "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance).

After you have completed the required scans (without the Spybot scan since it won’t run) and produced the requested logs, start your own thread in the Malware Removal forum, making sure to post the HijackThis log produced from the above instructions.

Hi md usa spybot fan,

thanks for your advice, on Friday evening I was talking with some friends about that. They gave me some ideas which helped me to solve the problem. First I brought back the system to the last instauration point. So spybot worked again, but told me it is clean. Therefor I installed Kaspersky and I've scanned again. Kaspersky found in the inactivated directory a lot of male ware deleting them. The massage disappeared and all seems fine. I asked me why spybot didn't scan the inactivated directory? Do you agree that this is enough to be sure that the system is clean?

[spybotsandra]

Hello,

This is a very nasty infection or worm (like the win32 Bagle) that deletes the Spybot.exe and several files of different antivirus-solutions.
We are working on threats like this that hide very deeply in your system.

Best regards
Sandra
Team Spybot