tetonbob

You need to keep this machine offline as much as possible. We're back to square one. Discontinue your usual online practices until we have this under control.

If you have another machine with which you can communicate, use that instead of the infected one. Transfer tools and logs between the machines via removable media such as USB stick or CDR.

Delete your existing version of ComboFix. Also delete C:\ComboFix folder if it exists.

Download a new version from the link below.

You might want to consider an alternative to CA. It does not appear to be helping you. I can provide free alternatives.

---------------------------------------------------------------------------------------------

1. Download this file - http://download.bleepingcomputer.com...a/ComboFix.exe
   
   * IMPORTANT !!! Place combofix.exe on your Desktop
   
   
   
2. Disconnect from the internet....pull the plug!
   
3. Disable your AntiVirus application.
   
   
4. 1. Open AVG Anti-Spyware by double-clicking the multi-colored box emblazoned with an 'S' in the system tray.
   2. In the 'Resident Shield' section, toggle the AVG Anti-Spyware active protection 'off' by clicking 'Change state' which will then change the protection status to 'inactive'.
   3. If you are instructed to reboot at any time during your cleanup, AVG Anti-Spyware will prompt you as to whether you would like to "Restart the Resident Shield".
   4. Reply 'no' and set it to 'inactive' for the duration of your cleanup.
   
   
5. Go to -> Run -> paste in the following single line command & click OK
   
   

   "%userprofile%\desktop\combofix.exe" /killall

   
   
   
   
6. Follow the prompts. Type "1" and press Enter to begin the scan.
7. Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.
   
8. When finished, it shall produce a log for you. Post that log in your next reply
   
   Note:
   Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
   
   ---------------------------------------------------------------------------------------------
   
9. Re-establish an internet connection. (or transfer logs to a clean machine via USB stick or CDR)
   
10. Open HijackThis and click on 'Do a System Scan and save a Logfile'. Save the log file and post it here.
    
    ---------------------------------------------------------------------------------------------