Posted 27 June 2008 - 09:48 PM
I am repairing the computer of a neighbor and have encountered a pretty nasty infection.
Although I am able to install and run CCleaner, AdAware2008, a-squared, and SpyBlaster, I am blocked from installing everything else I've been able to think of to combat malware.
The following install programs do not execute:
-Spybot search & destroy
Firefox will install, but will not run. Opera won't even download via the corrupted IE. None of this changes in safe mode.
In IE itself, all links out of search engines clicked are redirected. If you manually input an address, it fails to connect.
When I ran AdAware and a-squared, it turned up trojans, CWS, Zango, some redirect stuff, etc (I can't remember it all) and did some removal of those. However, no matter how many registry entries I trim out via HiJackThis, I still haven't found what's up. CWShredder comes up clean.
This is a new one for me. Maybe a rootkit?
I plan on returning to their home (one house away) and finishing this off tomorrow. I'd like to get an opinion of what I might be facing.