|Whatever it is seems to play 'hard to find'.|
If the infection does not let you download files to the infected computer, or you have no Internet connection, download the file/program requested below to a clean computer and then transfer them to the infected computer. You can use a USB flash drive, or other removable media (CD/DVD, external drive).
Please download RogueKiller
Save it to your Desktop.
Now, close all open programs.
For XP, simply double-click RogueKiller.exe
For Vista/Windows 7, right click the file and select: Run as Administrator
When prompted, type 1 and hit Enter.
An RKreport.txt should appear on your Desktop.
Note: If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe
>>Please post the contents of the >RKreport.txt< in your reply.<<
We will take further action based on the results of this report.
Also, let's see if a RootKit is detected...
Let's get some diagnostics, see if they find a RootKit, and then determine what strategy to pursue.
Please download GMER:
[Downloads a randomly named file. (Recommended)]
Disconnect from the Internet and close all running programs.
Temporarily disable any real-time active protection so your security programs do not conflict with gmer's driver. Info:
Double-click on the randomly named GMER file (i.e. n7gmo46c.exe)
Allow the gmer.sys driver to load...
GMER opens to the Rootkit/Malware tab and performs an automatic quick scan when first run. (Please do not use the computer while the scan is in progress.)
If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO
Now, click the >Scan< button.
If you see a rootkit warning window, click OK.
When the scan finishes, click 'Save...' button to save the scan results to your Desktop.
Save the file as >gmer.log<
>>Click the Copy button and Paste the results of the GMER log in your reply.<<
Note: Please, do not take action on any of the information on the GMER report!!
If you encounter any problems, try running GMER in Safe Mode:
If GMER crashes or keeps resulting in a BSODs, uncheck 'Devices' (on the right side) before scanning.
Next, download mbr.exe
Save the file to your Desktop.
Double-click >mbr.exe< and follow the prompts.
When mbr.exe is done, it creates a log.
>>Also copy and paste contents of the mbr.exe log in your reply.<<
Retired - Doin' Dis, Dat, and slapping malware.