I had Malwarebytes installed, tried to run it, and it shut it down shortly after starting it. Trying to run it after that I get the message "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item". I was able to uninstall and reinstall it, and it repeated the same process over again. I tried renaming the mbam.exe file, but it wouldn't let me. I have received similar results from spybot as well.
I tried some scans from a flash drive that were downloaded from a clean computer, such as a-squared, clamwin, and superantispyware and got mixed results. Clamwin and A-squared both were able to complete scans and detected some trojans, and subsequently remove them. But when I run superantispyware, it detects "Trojan.Dropper/SVCHost-Fake", but shortly after detecting it, the program shuts down complete. I've tried pausing the scan shortly after detecting it, removing those files, then rebooting, and the file is still there.
I can run rkill over and over and over again, and it always tells me that it shut down \.\globalroot\device\svchose.exe\svchost.exe, but I can run it 30 seconds later, and it's there again.
I've tried running HijackThis (saw it as a recommendation on another forum), and it appears to run completely, but shuts down within seconds after a logfile shows up.
I feel that I've done all I can do with my limited knowledge/experience. Can anyone help me thru this?
Thanks very much.
Edited by hamluis, 21 October 2010 - 09:36 AM.
Moved from XP forum to Am I infected ~ Hamluis.