Can you reboot in "safe mode with networking
? If so, try downloading from that mode.If you cannot use the Internet or download any required programs
to the infected machine, try downloading them from another computer (family member, friend, library, etc) with an Internet connection. Save to a flash (usb, pen, thumb, jump) drive or preferably a blank CD
, transfer to the infected machine, then install and run the program(s). If you cannot copy files to your usb drive, make sure it is not "Write Protected
". Some flash drives have a switch on the side or on the back as shown here
which could have accidentally been moved to write protect.
Some types of malware will target Malwarebytes Anti-Malware and other security tools to keep them from running properly. If MBAM will not install and renaming
or changing the file extension
did not help, then you can try installing and performing a Quick Scan
in "safe mode
Doing this is usually not advised as MBAM is designed to be at full power when running in normal mode and loses some effectiveness for detection & removal when used in safe mode. Further, scanning in safe mode prevents some types of malware from running so it may be missed during the detection process. For optimal removal, normal mode is recommended
so it does not limit the abilities of MBAM. Therefore, after completing a safe mode scan, reboot normally, uninstall MBAM, then reinstall it and perform another Quick Scan.
When I hit start button and scroll over all programs it says empty,all bookmarks seem to be gone
The symptoms you describe can be indicative of a side effect
from the HDD Defrag family of rogue security programs
which changes file attributes to "hidden", making them appear invisible
so the user thinks some of their files have been deleted. Newer variants of the FakeHDD rogue delete Quick Launch and Start Menu items/folders.
See this example guide
which includes removal instructions and using unhide.exe
(Step 17), a tool which will remove the "hidden" attribute on all files and restore Quick Launch and Start Menu to their proper location. The tool is designed not to remove hidden attribute for system files. When done you will need to restore the hidden attributes to those files manually.
Edited by quietman7, 16 May 2011 - 12:56 PM.