Hello Dave and welcome to MalwareBytes forums.
You will need to continue to download tools using another pc, until this one is better and able to connect to internet.
Ideally download and burn to CD/DVD and transport to infected pc, and copy to the Desktop each tool.
Wish you had mentioned with flavor of Windows this is.
IF XP, then
Set Windows to show all files and all folders.
On your Desktop, double click
My Computer, from the menu options, select tools, then Folder Options, and then select VIEW Tab and look at all of settings listed.
"CHECK" (turn on) Display the contents of system folders.
Under column, Hidden files and folders----choose ( *select* ) Show hidden files and folders.
Next, un-check Hide extensions for known file types.
Next un-check Hide protected operating system files.
IF Vista, then
Show all files:
- Click the Start button, and then click Computer.
- On the Organize menu, click Folder and Search Options.
- Click the View tab.
- Locate and uncheck Hide file extensions for known file types.
- Locate and uncheck Hide protected operating system files (Recommended).
- Locate and click Show hidden files and folders.
- Click Apply > OK.
Next, Take out the trash (temporary files & temporary internet files)
Please download
ATF Cleaner by Atribune, saving it to your desktop. It is used to cleanout temporary files & temp areas used by internet browsers.
Start
ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use
Firefox browser, do this also:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use
Opera browser, do this also:
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
ATF-Cleaner should be run per the above in every user-login account {User Profile}
=
Now, locate your Malwarebytes AntiMalware
mbam.exe and RENAME it to
Bravo.exeStart your
Bravo.
Click the Settings Tab. Make sure all option lines have a checkmark.
Click the Update tab. Press the "Check for Updates" button.
When done, click the Scanner tab.
Do a Quick Scan.
Next, using My Computer {Windows Explorer}
look at the folder here
C:\Program Files\Trend Micro\HijackThis\
HijackThis.exeand RENAME HijackThis.exe to
Sierra.exeRE-Enable your AntiVirus and AntiSpyware applications.
Now, start Sierra (the renamed HijackThis) , and Do a Scan and Save the log.
Reply with a copy of the latest MBAM log
and the latest HijackThis log
and tell me,
How is your system now ?Be sure to Preview your reply. If all does not fit in one reply, use a 2nd or 3rd reply if needed.
Do NOT attach the reports, but copy and paste them in-line.
Use the
ADDReply button to initiate the reply.
Do NOT use this pc to do any casual websurfing of any sort when it finally
can connect !!