Please download Malwarebytes
Alternate link:
http://www.GeekPolice.net/MBAM-Download-h21.htm (Note: if you already have the program installed, just follow the directions. No need to re-download or re-install!)
Double Click mbam-setup.exe to install the application.
(Note: if you already have the program installed, open Malwarebytes from the Start Menu or Desktop shortcut, click the Update tab, and click Check for Updates, before doing the scan as instructed below!)
Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Full Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. If you are prompted to restart, please allow it to restart your computer. Failure to do this, will cause the infection to still be active on the computer.
Please save the log to a location you will remember.
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
The log can also be found at C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt
Copy and paste the entire report in your next reply.
If Malwarebytes fails to download please use the following link:
http://malwarebytes.org/mbam-download-exe-random.php=============================================
Download
Combofix from any of the links below, and save it to your
desktop.
Link 1 Link 2Link 3When saving ComboFix rename it to
PCHelpForum.exe to prevent it from being blocked by malware.
Refer to this image:
To prevent your anti-virus application interfering with ComboFix we need to disable it. See
here for a tutorial regarding how to do so if you are unsure.
- Close any open windows and double click PCHelpForum.exe to run it.
You will see the following image:
Click
I Agree to start the program.
ComboFix will then extract the necessary files and you will see this:
As part of it's process, ComboFix will check to see if the
Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's
strongly recommended to have this pre-installed on your machine before doing any malware removal.
This will not occur in Windows Vista and 7It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
If you did not have it installed, you will see the prompt below. Choose
YES.
Follow the prompts to
allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted,
agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
Click on
Yes, to continue scanning for malware.
When finished, it will produce a report for you. Please post the contents of the log (
C:\ComboFix.txt).
Leave your computer alone while ComboFix is running. ComboFix will restart your computer if malware is found; allow it to do so.Note: Please Do
NOT mouseclick combofix's window while its running because it may cause it to stall.
