Welcome to GeekPolice Forums! I'm
Crush but, you can call me Chris too 
and I will be helping you with your Malware issues.
A few things to keep in mind as we progress:1. We are all volunteer staff here so we log in and assess threads when real life, work, family, and other obligations permit. Additionally, we are located all over the world. There may be a bit of a time delay due to this.
2. Malware Removal threads are
very time intensive. Each entry must be researched until it can be said with 100% certainty whether or not it can stay or needs to be removed. Sometimes additional work is needed to weed out suspect entries
3. This may turn into a long ordeal but, rest assured we
will stay with you until you are completely disinfected.
4. Only
Tech Officers,
Global Moderators,
Administrators, and
Malware Advisors are allowed to give advice on removing malware from your computer. Do not run any tools unless specifically asked to by a member of one of these usergroups
5. If you are not the original poster of this thread
DO NOT run any fixes given to the poster in this thread. They are all custom tailored specifically to
this user. It could prove to be disastrous.
6. Please keep responding until I give you the
"All Clear".
Absence of symptoms does not mean that everything is clear. 7. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
8. If you have any questions or issues
please stop and ask! We are all here to help.
IMPORTANT: Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.Because of this, I advise you to backup any personal files and folders before you start.
If you follow these instructions, everything should go smoothly
.
Please
subscribe to this thread to get immediate notification of replies as soon as they are posted.
To do this click
, then click
Preferences. Make sure
Always notify me of replies is set to
Yes
With that out of the way:
Please download and run
RKill.
Download mirror 1 -
Download mirror 2 -
Download mirror 3- Save it to your Desktop.
- Double click the RKill desktop icon.
- It will quickly run and launch a log. If it does not launch a log, try another download link until it does.
- Please post its log in your next reply.
- After it has run successfully, delete RKill.
Note: This tool only kills the active infection, the actual infection will not be gone. Once you reboot the infection will be active again! Please do not reboot until instructed further to do so.========
Please download
ComboFix 
from
BleepingComputer.com Alternate link: GeeksToGo.com Rename ComboFix.exe to commy.exe before you save it to your Desktop - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found here
- Click Start>Run then copy paste the following command into the Run box & click OK "%userprofile%\desktop\commy.exe" /stepdel
- As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
- Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console
Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures. Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
- Click on Yes, to continue scanning for malware.
- When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply.
ANTIVIR virus on mini laptop2nd August 2010, 3:29 am