Posted 29 October 2010 - 08:15 AM
Guys, this is my first post here as I am out of options. I'm working on my friends computer running XP, SP3. Originally it has the Anti-Virus 2010, MBAM wouldn't find it, so I manually found the .exe program and deleted it. Shortly after, a big box appeared on the desktop saying "Your computer is infected", but no fake anti-virus programs came up asking to purchase their product to fix it.
To make a long story short, I don't know the name of whatever virus I have. Now within seconds of running, MBAM, Combofix, and Hijack This processes are killed. All of the .EXE programs on the entire computer are not showing up, they seem to be completely unable to execute. After restarting the computer, I can run MBAM but after the process is killed and I try and re-run it, a box comes up and says "you don't have access to this" or something like that, I have tried the CLCS or whatever to gain access to the folder with MBAM, but after I get access and run it again, the process is killed and access lost to the program. Rkill shows a SVCHost.exe as the only culprit, but after it restarts that process comes back up.
Does anyone have any advice short of reformatting the hard drive? I have access to the registry, but not sure where to look. Thanks.