Please download TDSSKiller
Save it to the Desktop.
Now, double-click* on TDSSKiller.exe to run the program.
Click the 'Start Scan' button.
Do not use the computer during the scan
If the scan completes with nothing found, click Close to exit.
When the scan finishes it displays a Scan results screen stating whether or not an infection was found on your computer.
To remove the infection, click on the Continue button.
If it does not say Cure on the results screen, leave it at the default action of Skip, and press the Continue button.
Do not change to Delete or Quarantine as it may delete infected files that are required for Windows to operate properly.
Reboot to finish the cleaning process
A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.220.127.116.11_27.07.2010_09.o7.26_log.txt) is created and saved to the root directory (usually Local Disk C:).
>>Please provide the contents of TDSSKiller in your reply.<<
Now, download iExplore.exe, which is a renamed copy of RKill:
[If the file does not download, paste the following, >without the brackets<, in the address bar of your browser:
Save the file to the Desktop, and double-click on it.
Ignore any messages, and allow the file to run until the command window closes.
If you have problems running RKill, download any of the other renamed versions of RKill from its download page.
Without a reboot, download Malwarebytes’ Anti-Malware (black button with green and white icon) http://download.cnet.com/Malwarebyt...
Save to the Desktop:
Double-click mbam-setup.exe and follow the prompts to install the program.
Run Malwarfebytes’ AntiMalware and update the program.
Once updated, select Perform Full Scan and click the scan button.
When the scan finishes, click OK in the message box, and you will see the results of the scan.
Click the Remove Selected button to get rid of the malware.
When Malwarebytes finishes, you may be prompted to reboot. If so, reboot.
>>Please post the >Malwarebytes log< in your reply.<< so we can see where we are at, and plan any additional removal strategy.<<
Note: If the infection does not let you download files to the infected computer, or you have no Internet connection, download the files/programs requested below to a clean computer and then transfer them to Desktop of the infected computer. You can use a USB flash drive, or other removable media (CD/DVD, external drive).
Retired - Doin' Dis, Dat, and slapping malware.