I know this computer is infected with God knows what. I cannot scan with anything, including Malware Bytes. I had Open Cloud Antivirus for a while. I followed directions for removal, but it never set the IE proxy settings, and I couldn't get MB or rootkill to run. It is now redirecting on Google searches and occasionally loads porn. It is hiding all desktop icons, but when I click Show Hidden Files, they reappear as a hidden file, and I can access them. My start menu has no programs, but they are still on my disk. I am running in safe mode with networking, and it is still doing most of the crap it does in regular mode.
I ran SuperAntiSpyware and found koobface and Open Cloud. I deleted the EXE files it listed. I don't see the Open Cloud stuff in safe mode. I also downloaded ESET online scanning. But nothing finishes scanning, not even ESET, even though the last scan lasted around 2.5 hours. SuperAntiSpyware just terminates after some point. So I cannot use a program to completely delete whatever it finds.
I tried to run ESET again, but it says "Unexpected error 101. ESET has already been run on this computer in the past. Only files necessary to update the current version will be uploaded." Except it crashes, and you can't use it.
Malware Bytes will not run with renamed files, off my USB, or off the computer via the desktop. Sometimes it says it cannot find the path specified. When I click from the desktop, it says, "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item." (I get this same message if I try to run SAS from the desktop. I can only run it from the EXE on the download Firefox tab.) When I did get it to load, usually via a fresh install, it will run for 12 seconds and disappear, which is about the time it finds the first infection. Then I can't get it to run again. Sometimes it will say I am blocked from running it. Ditto if I try to install a AV program from a USB or online. It says I am blocked from that action.
Rootkill finds nothing, when I can get it to run. TDS Killer found something and removed it, but I didn't catch what it was.
Can anyone help me? I'm not sure what I can run to get what might be needed to see what's on here. This is the computer my little boy uses for his school. Any help would be appreciated.
Edited by Lady23, 03 October 2011 - 09:48 PM.