Download [b]Combofix[/b] from any of the links below. You[b][i] must [/i][/b][b]rename it [/b]before saving it. [b] [color=#FF0000]Save it to your desktop[/color][/b].
[url=http://download.bleepingcomputer.com/sUBs/ComboFix.exe][b]Link 1[/b][/url]
[url=http://www.forospyware.com/sUBs/ComboFix.exe][b]Link 2[/b][/url]
[img]http://i266.photobucket.com/albums/ii277/sUBs_/combofix/CF_download_FF.gif[/img]
[img]http://i266.photobucket.com/albums/ii277/sUBs_/combofix/CF_download_rename.gif[/img]
[color=purple][b]* IMPORTANT !!! Save Combo-Fix.exe to your Desktop[/b][/color]
[list]
[*][b]Disable your AntiVirus and AntiSpyware applications,[/b] usually via a right click on the System Tray icon. They may otherwise interfere with our tools
[*]See this [url=http://www.bleepingcomputer.com/forums/topic114351.html][color=#0000FF][b]Link[/b][/color][/url] for programs that need to be disabled and instruction on how to disable them.
[*][b]Remember to re-enable them when we're done.
[/b]
[*][b]Double click on Combo-Fix.exe & follow the prompts.[/b]
[*]As part of it's process, ComboFix will check to see if the [b]Microsoft Windows Recovery Console [/b]is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
[*]Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
[/list]
[b][color=#FF0000]The recovery console must be installed or Combofix may not be able to fix this infection[/color][/b]
[color=blue]**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.[/color]
[img]http://img.photobucket.com/albums/v706/ried7/RC1.png[/img]
Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
[img]http://img.photobucket.com/albums/v706/ried7/RC2-1.png[/img]
[b]Click on Yes,[/b] to continue scanning for malware.
When finished, it shall produce a log for you. Please include the [b]C:\ComboFix.txt[/b] in your next reply.
[color=#800080][b]*If there is no internet connection when Combofix has completely finished then restart your computer to restore back the connections.[/b][/color]