Hi and welcome to TSG
My name is Iain and I will be helping you clean your system.
You may wish to
Subscribe to this thread
(Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.
Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below. Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean. If there is anything you don't understand, please ask BEFORE proceeding with the fixes. Please ensure that you follow the instructions in the order I have them listed. Note that if you do not respond within 5 days I shall no longer check this thread for replies. Please do not install or uninstall any programmes, or run any other scanners or software, unless I specifically ask you to do so. Also please copy and paste logs into the thread, rather than add them as attachments. IMPORTANT - for Windows Vista and Windows 7 start all tools by using right click > Run as Administrator.
**************************************************************************
NOTE: You may need a flash/USB drive to download files and transfer them to the infected system.
**************************************************************************
Please download
Rkill from any one of these links and save it to your
desktop.
Rkill.com Rkill.scr Rkill.pif
Now double click on
Rkill to run it. If the first one doesn't work try the next one.
This will help remove certain processes and should restore any file associations and your desktop.
Note: Your system is still infected as Rkill does not delete files - it merely helps to temporarily disable the infections, allowing us to start the cleansing process. Do NOT reboot after running Rkill.
*******************************************************************
Please download
exe_fix to your
desktop. (Use your falsh drive to transfer it)
Double click on
exe_fix.com to run it.
Type the number 1 at the prompt and allow the tool to run.
This will allow you to run .exe files.
*******************************************************************
Please download
TDSSKiller.zip and extract TDSSKiller.exe to your
desktop.
Execute TDSSKiller.exe by doubleclicking on it. Press
Start Scan.
- If Malicious objects are found, ensure Cure is selected (it should be by default)

- Click Continue then click Reboot now

- Once complete, a log will be produced at the root drive which is typically C:\
For example, C:\TDSSKiller.2.4.0.0_24.07.2010_13.10.52_log.txt.
Please attach that log.