please download MiniToolBox by Farbar and save it to your desktop.
Run tool as Administrator and make sure that these options are checked :
- Flush DNS
- Reset IE Proxy Settings
- Reset FF Proxy Settings
- List Installed Programs
Post log here .
Download TFC by OldTimer and save it to your desktop.
Run it as Administrator and click on Start button.
If programs need reboot, allow it to do so.
NOTE: IF your desktop disappears, don't panic, it's normal.
Download Rkill and save it to your desktop (prefered version is iexplore.exe).
Run tool as Administrator,it will kill all malicious processes.
Program will download and install Malwarebytes as well, and it will launch.
Make sure you have latest definitions by clicking on Update Now,then under Scan choose Threat Scan.
After scanning is done, click on Remove if malware is found,tool will ask for restart , allow it to do so.
Attach MBAM log here (you can find it in History > Application Logs).
Scan with Norton Power Eraser
CAUTION: NPE uses aggressive methods to detect and remove malware,so do not touch any of settings !
Download NPE by Symantec and save it to your desktop.
Run the tool as Administrator,accept license agreement,and click Scan button.
Program will ask you to reboot to continue scanning (includes rootkit scan),so allow it to restart.
After restart program will automatically launch itself and start scanning. Scanning takes 5-10 minutes,so be patient !
If malware is detected,make sure that Create restore point option is checked,then click Fix button. After that,click on Restart now to complete removal.
Scan with Malwarebytes AntiRootkit
Please download MBAR and save it to your desktop.
Run tool as Administrator, tool will extract itself, and then launch.
Click Next to accept terms and conditions, and click Update to obtain latest definitions.
If malware is found click on Cleanup button , but make sure that Create restore point option is checked before proceeding !
Program will ask you to restart, allow it to do so.
Note: If you're experiencing internet connection issues or other anomalies after running MBAR and removal of rootkits, it is recommended to run fixdamage.exe located inside mbar folder. Run it as Administrator and press Y if asks you do you want to continue.
Attach log here.