Hello nzbarzh.
Please save this page to
Notepad in order to assist you when carrying out the following instructions.
Before beginning the fix,
read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding.
Ensure that there aren't any opened browsers when you are carrying out the procedures below.
It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.
------------------------------------------------------
Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.
Please stay with me until given the 'all clear' even if symptoms seemingly abate.
Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.
------------------------------------------------------
Please uninstall the following via Start->(or My Computer)->Control Panel->Add or Remove Programs if they exist:
Viewpoint Media Player<<<This is considered foistware instead of malware since it is installed without users approval, but doesn't spy or do anything "bad". Please read
here and
here
------------------------------------------------------
Download
Combofix from any of the links below, and Save it to your Desktop. For information regarding this download, please visit this webpage:
http://www.bleepingcomputer.com/comb...o-use-combofix
Link 1
Link 2
Link 3
**Note: It is important that it is saved directly to your desktop**
--------------------------------------------------------------------
1. Close any open browsers.
2. Close/disable all antivirus and antimalware programs so they do not interfere with the running of ComboFix. Get help
here
--------------------------------------------------------------------
Double click on
ComboFix.exe & follow the prompts.
- When finished, it will produce a report for you.
- Please post the C:\ComboFix.txt along with a new HijackThis log for further review.
------------------------------------------------------
- Please download SmitfraudFix (by S!Ri) and Save it to your Desktop.
- Double-click smitfraudfix.exe to start the tool.
- Select option #1 - Search by typing 1 and press Enter
- The tool will create a log named rapport.txt in the root of your drive, eg: Local Disk C: (C:\rapport.txt) or partition where your operating system is installed.
- Please copy/paste the content of that report into your next reply.
IMPORTANT: Do NOT run option #2 OR any other option unless you are directed to do so!
------------------------------------------------------
Open
HijackThis and click on 'Do a System Scan and Save a Logfile'. Save the logfile and post it here.
------------------------------------------------------
Please post the following in your next reply:
C:\ComboFix.txt
C:\rapport.txt
new HijackThis log
If you have any questions along the way...STOP and ask them before proceeding.