If downloading files to the infected computer is not possible, access a clean computer and transfer files to the infected computer using a USB flash drive, or other removable media (CD/DVD, external drive).
Download one of these files: iExplore.exe or eXplorer.exe. They are renamed copies of RKill:
Save the file to the Desktop, and double-click on it. (For Windows 7, select: Run as Administrator
If you get a message that RKill is an infection, just ignore it. If you run into infections warnings to close RKill, leave the warning on the screen and run RKill again. Also, if you encounter problems running RKill, download another renamed version of RKill from its download page.
Do not reboot your computer after running RKill!
Next, download Malwarebytes’ Anti-Malware (black button with green and white icon) Save to the Desktop:
Double-click mbam-setup.exe and follow the prompts to install the program. (For Vista or Windows 7, select: Run as Administrator)
Run Malwarfebytes’ AntiMalware and update the program.
Once updated, select Perform Full Scan and click the scan button.
When the scan finishes, click OK in the message box, and you will see the results of the scan.
Click: Remove Selected
When Malwarebytes finishes, you may be prompted to reboot. If so, reboot.
Please post the Malwarebytes log in your reply, and we will determine if any further action is necessary.
Note: This infection may hide all the files on your computer. If this has happened, make your files visible again by downloading the following program to the Desktop:
Double-click on the Unhide.exe icon on the Desktop and allow the program to run.
Unhide.exe removes the Hidden attribute from the files on your hard drives. If there are any files that were purposely hidden by you, you will need to hide them again after this tool is run.