If you cannot download the following file, the malware is blocking the attempt. You need to download to a clean computer and then transfer to the infected one using a USB flash drive, or external media (an external drive or a CD).
Since the malware on your computer does not allow the launch of executables (a file ending with .exe), we must fix that first.
Download FixNCR.reg from a clen computer, and save it to your flash drive:
Insert the USB drive into the infected computer and open the drive letter associated with it.
Double-click on the FixNCR.reg file to fix the Registry on your infected computer.
Allow it t merge, if so requested.
You should now be able to run your normal executable programs and proceed to the next step.
Now, download RogueKiller
Save it to your Desktop
Close all open programs.
For Vista/Windows 7, right click the file and select: Run as Administrator
When prompted, type 1 and hit Enter.
An RKreport.txt should appear on your Desktop.
Note: If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe
>>Please post the contents of the >RKreport.txt< in your reply.<<
We will take further action based on the results of this report.
If you have any problem with te above, let us know, and we will try an alternate route.
Retired - Doin' Dis, Dat, and slapping malware.