_________________________________
Welcome to the Forums.
The fixes we will use are specific to your problems and should only be used for this issue on this machine.
Please only use this topic to reply to.
Do not start another thread.
If any other issues arise let me know.
The process is not instant. Please continue to review my answers until I tell you your machine is clear. Absence of symptoms does not mean that everything is clear. So lets do this to the end!
- All hijackthis logs I ask for should be done in normal mode ( not safe mode)
- These logs should be done last after you have followed my instructions in the previous post.
Please if you decide to seek help at another forum let us know. There is a shortage of helpers and tying 2 of us up is a waste of time.
If you have any questions about any advice given here please STOP and ask!
The fixes we are going to do may and may not help other problems you are having.
__________________
Please download
VundoFix.exe to your desktop.
Double-click
VundoFix.exe to run it.
Click the
Scan for Vundo button.
Once it's done scanning, click the
Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click
YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click
OK.
Turn your computer back on.
Please post the contents of C:\vundofix.txt and a new HiJackThis log.
_________________________________
Download
SmitfraudFix (by S!Ri) to your Desktop.
Smitfraud by S!ri
______________________________
- Double clcik the smitfraud.exe
- When promted
Press any key to continue.
- Select option #1 - Search by typing 1 and press Enter
This program will scan large amounts of files on your computer for known patterns so please be patient while it works. When it is done, the results of the scan will be displayed and it will create a log named
rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please post that log along with any others I have asked for in your next reply.
Note :
process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user. When prompted by allow it to run
IMPORTANT: Do NOT run any other options until you are asked to do so!
If you do and smitfraud isn't present it will have undesirable effects
_____________________________
In your next reply I would like to see:
- A new HJT log
- The Report from Vundofix
- The report from smitfraud.