Thanks for that.
* Please download
Malwarebytes' Anti-Malware from
HERE or
HERE
Double Click
mbam-setup.exe to install the application.
* Make sure a
checkmark is placed next to
Update Malwarebytes' Anti-Malware and z
Launch Malwarebytes Anti-Malware, then click
Finish.
* If an update is found, it will download and install the
latest version.
* Once the program has loaded, select
"Perform Quick Scan", then
click Scan.
* The scan may take some time to finish,so please be patient.
* When the scan is complete,
click OK, then
Show Results to view the results.
* Make sure that
everything is checked, and click
Remove Selected.
* When
disinfection is completed, a log will open in
Notepad and you may be prompted to
Restart.(See Extra Note)
* The log is automatically saved by
MBAM and can be viewed by clicking the
Logs tab in MBAM.
*
Copy&Paste the
entire report in your next reply along with a fresh
HijackThis log.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.
Please download
http://siri.urz.free.fr/Fix/SmitfraudFix.zip (by
S!Ri)
Extract the content (a folder named
SmitfraudFix) to your Desktop.
Open the
SmitfraudFix folder and double-click
smitfraudfix.cmd
Select option #1 -
Search by typing
1 and press "
Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
Please do not run any other option until asked to do so, Thanks
Note :
process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm
Please post a new hijackthis log and the smitfraudfix log and MBAM log. Thanks.