Hi,
Please visit this webpage for download links, and instructions for running combofixl:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Please ensure you read this guide carefully and install the Recovery Console first.
The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.
Once installed, you should see a blue screen prompt that says:
The Recovery Console was successfully installed.
Please continue as follows:
Please include the following reports for further review, and so we may continue cleansing the system:
C:\Combofix.txt
________
You're using an outdated version of hijackthis. Please uninstall it.
Please click Here to download HijackThis to your desktop.
Click the Download button. When the Trend Micro HJT install box appears, double click on the HJTInstall.exe. Click on Install.
It will be installed by default here: C:\Program Files\Trend Micro\HijackThis
A shortcut to the application will also be placed on your Desktop.
The program will open automatically after installation.
You can double-click the icon that was placed on the Desktop to run subsequent HijackThis scans or you can use the icon inside the folder. The folder HijackThis is where you will find the HJT logs that you save. When you use the application to remove anything, you will also find the backup copies made by HJT inside this folder.
Click on "Do a system scan and save logfile" When the log pops up in Notepad, copy and paste that file back here.
________
HJT Uninstall list
Please visit this webpage for download links, and instructions for running combofixl:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Please ensure you read this guide carefully and install the Recovery Console first.
The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.
Once installed, you should see a blue screen prompt that says:
The Recovery Console was successfully installed.
Please continue as follows:
- Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
- Click Yes to allow ComboFix to continue scanning for malware.
Please include the following reports for further review, and so we may continue cleansing the system:
C:\Combofix.txt
________
You're using an outdated version of hijackthis. Please uninstall it.
Please click Here to download HijackThis to your desktop.
Click the Download button. When the Trend Micro HJT install box appears, double click on the HJTInstall.exe. Click on Install.
It will be installed by default here: C:\Program Files\Trend Micro\HijackThis
A shortcut to the application will also be placed on your Desktop.
The program will open automatically after installation.
You can double-click the icon that was placed on the Desktop to run subsequent HijackThis scans or you can use the icon inside the folder. The folder HijackThis is where you will find the HJT logs that you save. When you use the application to remove anything, you will also find the backup copies made by HJT inside this folder.
Click on "Do a system scan and save logfile" When the log pops up in Notepad, copy and paste that file back here.
________
HJT Uninstall list
- Open HijackThis > Click "Misc Tools Section"
- Click "Open Uninstall Manager".
- Click "Save List".
- Save it to your Desktop.
- Copy the contents of the file to your next reply.