Hello,
Your thread is
not locked. More important, you need to tell us your Windows version/edition, and what antivirus program is installed on this system. And if you have tried to get & run some required reports as per this topic
http://www.malwareby...?showtopic=9573
Do this to close any rogue (fake) pop-up window. Repeat as needed.
Use
ALT+F4 keys to close those rogue pop-up windows. Press and hold the ALT key & then press F4 key.
Do NO websurfing or internet transactions, and confine to just this forum and the sites I guide you to.
Next, do this:
1. Go
>> Here << and download ERUNT
(ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)
2. Install ERUNT by following the prompts
(use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)
3. Start ERUNT
(either by double clicking on the desktop icon or choosing to start the program at the end of the setup)
4. Choose a location for the backup
(the default location is C:\WINDOWS\ERDNT which is acceptable).
5. Make sure that at least the first two check boxes are ticked
6. Press OK
7. Press YES to create the folder.
=
1. Set Windows to show all files and all folders.
On your Desktop, double click
My Computer, from the menu options, select tools, then Folder Options, and then select VIEW Tab and look at all of settings listed.
"CHECK" (turn on) Display the contents of system folders.
Under column, Hidden files and folders----choose ( *select* ) Show hidden files and folders.
Next, un-check Hide extensions for known file types.
Next un-check Hide protected operating system files.
2. Take out the trash (temporary files & temporary internet files)
Please download
ATF Cleaner by Atribune, saving it to your desktop. It is used to cleanout temporary files & temp areas used by internet browsers.
Start
ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use
Firefox browser, do this also:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use
Opera browser, do this also:
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
ATF-Cleaner should be run per the above in every user-login account {User Profile}
=
Go
>> here <<
and download RootRepeal and
SAVE to your Desktop.
Doubleclick RootRepeal.exe icon on your Desktop.
Click on the Report tab at bottom of window and then click on Scan button.
A Windows will open asking what to include in the scan. Check all of the below and then click Ok.
Drivers
Files
Processes
SSDT
Hidden Services
Stealth Objects
You will then be asked which drive to scan.
Check C: (or the drive your operating system is installed on if not C) and click Ok again.
The scan will start.
It will take a little while so please be patient. When the scan has finished, click on Save Report.
Name the log RootRepeal.txt and save it to your Documents folder (it should default there).
When you have done this, please copy and paste it in this thread.
=
Reply with copy of Rootrepeal.txt