If you cannot download the following file, the malware may be blocking the attempt. You need to download the file to a clean computer and then transfer it to the infected one using a USB flash drive, or external media (an external drive or a CD).
Please download exeHelper from one of these two places:
Note: The malware on your computer does not allow you to launch executables (a file ending with .exe), so we must fix that first. The program below is a .com or .scr file, so it should bypass the malware hold.
Save it to your USB Flash drive (or removable media), and then go to the infected computer, and place the file on the Desktop.
Vista or Windows 7 users right click the downloaded file and select “Run as Administrator"
A black window should pop up
Press any key to close, once the fix is completed.
>>Please post the contents of the exehelperlog.txt in your reply.<<
[It is created in the directory where you ran exeHelper, and should also open at the end of the scan.]
When exeHelper finishes, restart your computer.
See if you can run .exe files now.
Next, download RogueKiller
Save it to your Desktop.
Now, close all open programs.
For Vista/Windows 7, right click the file and select: Run as Administrator
When prompted, type 1 and hit Enter.
An RKreport.txt should appear on your Desktop.
Note: If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe
>>Please post the contents of the >RKreport.txt< in your reply.<<
We will take further action based on the results of this report.
If you cannot get these programs to run, we do have another approach we can try.
Retired - Doin' Dis, Dat, and slapping malware.