Everything Related to Protection Stops and Hides

[KN4TX]

I've reached the end of my ability and am hoping someone in the forum has seen this and has some suggestions.

A friend asked me to look at his PC, which was running slow and acting erratic. I figured he was infected and I would run MalWareBytes and all would be good. I attempted to start the program, which I had installed the last time he got infected (ARGH!).

There would be a quick flash on the screen and then nothing.

He had McAfee installed, so I tried to bring up the ViruScan console, same thing, quick flash and nothing.

I figured I'd download MalWareBytes and reinstall but as soon as I entered the term in Google the browser (and all running copies) died. I tried this with FireFox, IE, Chrome and Safari. All same results. I could type MalWareBits and it would work but as soon as I clicked on a returned link, BAM. Dead again.

I've tried in SAFE mode with network, SAFE no network, SAFE with CMD prompt only. I've used MSConfig in the most basic mode and tried to identify the culprit but I don't see anything. I've been in the registry but only found a "MalWareBytes_is1" odd entry that I deleted but made not difference.

The ONLY programs I can get to run are SpyBot and ComboFix, altho ComboFix only runs in CMD prompt mode.

SpyBot found 80 items on first scan, included trojans and the various usual clutter. It cleaned them all and found nothing on next scan. After running SpyBot and cleaning, no change in behavior. MalWareBytes and McAfee still will not start or run.

I did rename MalWareBytes to Winlogon.exe and the program started and I was able to scan. Did a full scan... nothing found??? and even after scan I can not search for MalWareBytes without it killing any browser.

I tired RootRepeal but it found nothing out of the ordinary and the only file it flagged was the hibernate file.

LAST, but not least, I am using a thumb drive to copy programs from a good PC to my infected PC. Every time I insert, my copy of McAfee finds a trojan on the drive, coming from the infected one. I clean it every time but back it comes each time. I get the following

M.exe, with the following information:

generic!bg.gqq, Trojan, Application: C:\windows\explorer.exe

I think I've covered everything.

[DarkSnakeKobra]

Hi KN45X and welcome to malwarebytes'!

Sounds like you are infected. Please read this.

We don't work on Malware removal or diagnostics in the general forums.

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.