Member Avatar for cmwood

I created a folder called "Antispyware". I downloaded various antispyware programs into it. When I doubleclick the folder it opens for about 1 second and then closes. If I rename the folder to any name that does not have the word spyware in it it opens ok. I also cannot install Ad-Aware SE as it shuts off the install procedure after the installation wizard opens before I can click on next.

  • 2 Contributors
  • 3 Replies
  • 132 Views
  • 4 Days Discussion Span
  • Latest Post Latest Post by gerbil

Dani AI

Generated

described a classic symptom: a folder name tied to security software triggers Explorer to close and installers abort. 's point about keeping toolsets current is important — static collections can become unusable or even counterproductive if the system is compromised. Below are practical, conservative steps and checks to diagnose and recover without repeating actions already taken in the thread.

Possible causes (brief): some malware installs shell hooks or startup/policy entries that intercept Explorer or block programs whose names look like security tools. Others change file attributes or ACLs to hide or restrict folders. The exact mechanism varies; the following workflow focuses on safe investigation and removal rather than speculation.

Suggested step-by-step workflow

  1. Isolate the machine (disconnect from networks) and boot into Safe Mode or a bootable rescue environment created from a clean PC (use a reputable vendor's rescue ISO).
  2. Run an offline scan from the rescue environment to remove kernel/rootkit components that can hide while Windows runs.
  3. From Safe Mode, use a startup/shell-extension viewer to disable non-Microsoft shell extensions and suspicious autostart entries (Autoruns is the recommended tool for this). See Autoruns: https://learn.microsoft.com/en-us/sysinternals/downloads/autoruns. Also inspect shell extensions with ShellExView: https://www.nirsoft.net/utils/shexview.html.
  4. Inspect registry policy locations for blocking entries: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer and HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer. Back up any key before changing it.
  5. Check attributes and permissions on the folder (for example, use attrib and, if needed, reclaim ownership with takeown and reset ACLs with icacls).
  6. If unsure, image the drive first and seek a specialist — editing registry keys or removing drivers can render a system unbootable.

Notes and cautions: always back up data and registry hives before changes. Curate portable toolkits by keeping installers or rescue ISOs current rather than hoarding many static executables.

Recommended Answers

All 3 Replies

Member Avatar for gerbil

Call it malware tools then.
Don't build up a comprehensive collection of tools though apart from those which [auto-]update only the detection files - a lot of the tools we use are updated from week to week or more generally as required by developments, superseded versions my well be useless, and worse give a false sense of security. Many of these tools are single file types which are replaced wholly.
..now there was an old virus... nah, no virus could be that crude... do an online scan at Panda after running a cleaner such as CCleaner [check its configuration if you use FF]

Member Avatar for cmwood

Thank you for your reply. My purpose for the file was to have a collection of "Anti" products that are in one location to either burn to cd or put in the shared file for use on new builds or repairs on pc's in the future. I periodically replace the products with newer versions. Renaming the file does indeed allow it to open, but, does not address the cause of the problem which is some malware that will not allow an "antispyware" folder or program to run. I have since formatted and reloaded to get my pc functioning properly. Thanks again.

Member Avatar for gerbil

Ok, but note that ComboFix now has a datestamp - if your version times out it will not run, and i think the time is something like 2 weeks [not sure on that].

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.