View Single Post
  #2  
Old April 3rd, 2009, 03:50 AM
Aaflac's Avatar
Aaflac Aaflac is offline
Malware Removal Team
 
Join Date: May 2007
Location: Illinois, USA
Posts: 2,998
Welcome to CTH, bhopal!

Please do the following:

Download HostsXpert
  • Right-click the file and select: Extract all…
  • Extract the program to a its own folder
  • Double-click HostsXpert.exe to run the program
  • Click: Make Hosts Writable? in the upper left corner.
  • Click "Restore Microsoft's Hosts file" and then click "OK".
  • Click the X to exit the program.

Note: If a custom Hosts file was in place, edit those entries back in.

More information

Next, download Malwarebytes' Anti-Malware (MBAM)
Save the program to the Desktop
Close all Windows, including this one.

On the Desktop, double-click mbam-setup.exe to install the program, and follow the prompts
  • If an update is found, MBAM will download and install the latest.
  • Click OK
At the main program window
  • Make sure the following is checked: Perform Quick Scan
  • Click: Scan (The scan may take some time to finish, so please be patient.)
  • When the scan completes, a message box appears
  • Click OK
At the main Scanner screen:
  • Click on: Show Results
  • A screen displaying the malware found shows
  • Make sure everything found is checked, and click: Remove Selected
  • When the disinfection is complete, you may be prompted to Restart. Please do so.
  • When MBAM finishes removing the malware, a log opens in Notepad
  • The log is automatically saved and can be viewed by clicking the Logs tab.
~~~~
Download Random's System Information Tool (RSIT)
  • Save it to the Desktop
  • Double click on RSIT.exe to run the programRSIT
  • Click Continue at the disclaimer screen
  • Once the tool finishes, two logs open. Log.txt is maximized, and info.txt is minimized.(The logs are also contained in C:\rsit
~~~~

Please provide the following in your reply:
The MBAM report
The RSIT: Log.txt and info.txt

You may need to do consecutive posts (one after the other) if the logs are too long.
Reply With Quote