Unusual computer virus.

[ddeder]

I have a computer with a computer virus.

The computer will not allow me to install certain software (such as Avast) and will not allow me to run Hijackthis (not even in Safemode). If I try to google "antivirus" or "hijackthis" or related terms from this computer, the browser immediately closes itself. If I try to google terms not related to adware/spyware/virus, the browser works fine. I have been able to install several other products such as Windows Defender, AVG antivirus, a2 free, spybot, adaware, spysweeper, pest patrol, etc... but every one of these programs says my computer is clean! CWshredder and the mini smartsearch tool tells me the computer is clean. I am out of ideas.... If only I could get Hijackthis to run, I think I would see the problem. Any help is appreciated.

oops, wrong forum. Too early in the morning for me...

Moved from Technical Forum Issues
moderator allisolm

 

[Lemon law]

I seem to recall reading that you can sometimes get around this by renaming HJT something else. So, I assume you would go into HJT, renaming the executable something like
Lemon.exe, and then running that.

Certainly not saying I am right, but it gives you something to try. And once you have that resulting logfile, its really hard for malware to hide from that powerful tool.

 

[John]

Reboot to safe mode, disable system restore, and run everything in my rogueremoval kit. Be sure to check the README.

 

[lusher]

If that fails, you could just use runscanner, it can do everything hijackthis can do and more.

Some comments by notable orgs and people.

1) On isc.sans.org

One of the tools chosen by San handlers to be put into your "holiday/family incident response toolkit."

http://isc.sans.org/diary.html?storyid=3669


2) TonyKlein - Microsoft Most Valuable Professional (several years running) - maintainer of Collection of autostart locations and CLSID List , famous antispyware fighter

"RunScanner is indeed a laudable effort; kind of HijackThis on steroids... "

http://forum.piriform.com/inde...=0&p=91114&#entry91114