Follow the steps here it will work. Ignore the advertisment at the top
You can also look at
First clean up all temp and internet temp files
If you think you have a virus infection on your PC do one or both of the following :
- Run the free Mcafee Stinger program from http://vil.nai.com/vil/stinger/ -
Download here latest version of getsusp https://community.mcafee.com/thread/32269
Before you use Getsusp, you should go to this document
and download the PDF file explaining what Getsusp is and how it works, and this document
which downloads the installation guide PDF document.
If you want a second/third opinion, or to be on the safe side, then you can do a scan with the free versions of these tools :
If you already have Malwarebytes installed, the virus could be protecting itself against it. In that case, in order to get Malwarebytes running you'll need to rename the executable. Open theC:\Program Files\MalwarebytesAntimalware folder, then rename the "mbam.exe" file and double-click directly on the file to open the program. After updating the program, run a full system scan usingMalwarebytes.
Make sure both programs are updated to the latest versions before running them and let them clean anything they find. If they quarantine a file or fail to remove a file try to get a copy of itand send it toMcafee using the virus submission path described here :
Send the file to mcafee labs at http://vil.nai.com/vil/submit-sample.aspxMessage was edited by: Peacekeeper on 26/04/11 5:58:00 AM
Note to assist in removing you need to follow the bleeping compoter suggestion of stopping the process loading. Also you need to fix the exe file associations there is a reg file for that there.
Reset your browser to defaults check no proxy is specified in Tools internet options connections lan settings.
Oh the rename was for malwarebytes.
Download to a dvd of usb stick the malwarebytes setup file. Rename it to another name. Take usb to PC and run the setup file and when asked what folder to install into change the name as well. Install MWB and then go to the folder and rename the exe WB. I know bit of work but this way the virus will not know mwb is executed. Update it usually you can get through if file not recognised.
Run it and let it fix what it finds
Re getsupsp did it find any suspicious files .
Post the zip file from the log here and I will get someone to look at it.
Success! Following the instructions at bleepingcomputer worked! Thanks! A n observation: the instructions above begin with the link to bleepingcomputer, but it was not initially clear to me that I should click the link in order to find the instructions. Once I did (on another computer) all worked fine. Perhaps you could make it a little clearer for folks like me. Thanks again!
On another computer I clicked the link to bleepingcomputer.com page in reply #2 above from Peacekeeper, and followed the instructions and it worked for me.