Please Uninstall or Disable any P2P (peer-to-peer) programs on the infected computer before posting in this forum.
P2P software circumvents common-sense security measures and opens a user’s computer to a world of hurt.
Our regular volunteers' time is valuable and most are not willing to waste it on a machine that is almost certain to be reinfected in short order.
So, please remove or disable all P2P software for the duration of the cleaning process. Failure to do so may result in your thread being ignored.
This also includes the use of cracked software. The distribution and use of cracked copies is illegal and will not be tolerated here ever. It is also an easy way to get serious infections on the computer and if your computer is found to be infected because of the use of cracked software you will not receive assistance or further assistance.


In order for the few volunteers who offer a bit of their free time and expertise in this forum to assist you in a timely manner, please complete the following steps before posting a request for help:

Now, please begin the Initial Cleaning Process:

Please download Malwarebytes' Anti-Malware (MBA-M) to your Desktop.
DoubleClick mbam-setup.exe and follow the prompts to install MBA-M.
Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform full scan, then click Scan.
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected.
When MBA-M finishes, Notepad will open with the log. Please save it where you can find it easily. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt.


Please Run the ESET Online Scanner and attach the ScanLog with your post for assistance.
You will need to use Internet Explorer to to complete this scan.
You will need to temporarily Disable your current Anti-virus program.
Be sure the option to Remove found threats is checked and the option to Scan unwanted applications is Checked.
When you have completed that scan, a scanlog ought to have been created and located at C:\Program Files\EsetOnlineScanner\log.txt. Please post that log for us as directed below.

NOTE: If you are unable to complete the ESET scan, please try another from the list below:

BitDefender Online Scan
Panda Active Scan

Trend Micro HouseCall

F-Secure Online Virus Scanner

After the initial cleaning has been completed:

Please take note of any problems that you had with the above instructions and any problems that remain.
Finally please do the following:

Download DDS by sUBs and save it to your Desktop.
Be sure follow the instructions below carefully
• If your AV has a script blocker, please disable it
• DoubleClick on dds.scr to run the tool
* A command box will open, displaying added information for your reading pleasure while DDS completes its scan.
* Upon completion, a Dialog Box should open instructing you to save and post the TWO resulting logs (DDS.txt & Attach.txt).
Copy&Paste both the DDS.txt and the DDS Attach.txt into your post for assistance.

Notice I say copy/paste BOTH logs. The Attach.txt log says at the top to attach it, please do not attach it but copy/paste it also

Both of these logs are very long and because of that will take multiple replies in order to post them here. Please split the logs carefully as each and every line must be seen.

Originally Posted 4-07-05
Revamped and Simplified 3-05-08
Updated, edited and reposted by jholland1964 01-12-2012