Link to home
Start Free TrialLog in
Avatar of ClShaffer
ClShaffer

asked on

Cannot run spareware

I believe I have an addware spyware or malware. I cannot run Spybot, Malware, Spyspeeper.
Even in Safemode


I run Weather bug and it comes up with a translucent screen that cannot be hide except to close. I get a messages from norton where many emails are trying to be sent. I have programs that are trying to access the internet but I am running Zonealarm and stop them. I have clean all the temp files also. Any ideas.  
Avatar of skywalker39
skywalker39
Flag of United States of America image

Hi ClShaffer,

If you have another computer, take the hard drive you want to scan for spyware or malware and place it in another computer as a secondary drive and try to run a scan that way.
Avatar of ClShaffer
ClShaffer

ASKER

it is a sata drive.

This is the only computer I have that will accept a sata drive
Have you tried to install any of these?

      1. http://www.superantispyware.com/
      2. http://www.pctools.com/spyware-doctor/
      3. http://www.pctools.com/spyware-doctor-antivirus/
      4. http://www.pctools.com/free-antivirus/

If you have system restore enabled, try and do a system restore to a previous state. If none of these will install and if you computer seems to be getting worse, your best bet would be to re-install Windows XP with a fresh install.
Avatar of Adam Leinss
Boot from the F-Secure Rescue CD to do an offline malware scan:

http://www.leinss.com/blog/?p=247

If need be, try to burn it from a different PC if you current one isn't working.
Try the above options first, if you still have problems. Download MalwareBytes Anti-Malware, save it with a different name and update it and scan with it. Best to scan in safe mode. Can you post a HijackThis log?

Hope it helps.
Oops, I just noticed you said something about MalwareBytes. Can you not scan or not install it??

If the infection is still around, then I will send instructions on a more powerful tool called ComboFix.

There is a tutorial on it as well at:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

But its a very powerful tool and I wouldn't recommend using it until you've tried all the above mentioned options and they don't work.
Go to Start->Run and type in regedit and hit OK. Go to File->Export and save the registry somewhere as a backup. Now navigate to the following:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32

You should see values like aux, aux1, aux2, etc. (usually only aux, but numbers may be added to some). See what values you have for those entries. If they are random names, remove it and put in wdmaud.drv instead. If unsure, give us the values for those aux entries. Once those are taken care of you should be able to run those antispyware programs.

Definitely try getting ComboFix to run if you can (do the above if necessary to see if it helps).
ASKER CERTIFIED SOLUTION
Avatar of ClShaffer
ClShaffer

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Did ComboFix not work for you??