Hi kamak OK looks good. Heres what to do next. We need to turn off and on system restore. There are infections in it and by using system...
Hi Not a problem. I'll be here. Geri
Hi OK Looks good. I missed this so lets delete it. Using Windows Explorer (to get there right-click your Start button and go to "Explore...
Hi moonpie Ok, she has a number of infections, this is what she needs to do. It will take a number of scans and posts here. Make sure she...
Hi tarheel That's OK, I didn't see any evidence of a custom hosts file. Ok for this next part we need to disable Spybots Tea Timer. Here...
Hi tarheel OK things are getting better. Please do this. Please rename HJT. Click on "Start" > "My Computer "> Double click Local Disk C...
Hi RebeccainTO OK please do the same with these 2 files. C:\WINDOWS\system32\andt.sys C:\WINDOWS\system32\perfs.exe Please double-click...
Hi tylerho OK things are looking much better. Please do this. Please re-open HiJackThis and scan only. Check the boxes next to all the...
Hi tarheel Welcome to Windowsbbs. :) Please do the following. Download Malwarebytes' Anti-Malware (MBAM) from here or here and save the...
Hi Alex These are emails, eml is a email extention. Delete everything in your inbox, sent mail box, then delete everything in your deleted...
Hi moonpie It would be best if she could post a HJT log here for review. If that is not possible then have her do this. Go to Add/Remove...
Hi OK we'll try this. In safe mode. Please download the Killbox by Option^Explicit. Note: In the event you already have Killbox, this is...
Hi taylorwn OK Great. You're welcome, glad to have helped. :) Please look at this link for some preventive recommendations, It could keep you...
Hi tylerho Please do the following. Highlight and copy the contents of the code box below and paste it into a blank notepad, then save it to...
Hi Please run MBAM again. See here.. No action taken. Make sure you follow the instruction exacly as given Make sure a checkmark is...
Hi OK dss on The next account. Geri
Hi OK SDFix needs to be on the desk top in Tims user account and then ran. Then post the dss log for that account and then a dss log for the...
Hi treend Has the redirect and pop ups stopped? If so I will need to see a HJT log from each of these user accounts. Heather Lori...
Hi tylerho Yes you do have a mess here. Make sure you follow these steps in the order give. It may be helpful to print or save these...
Hi treend Welcome back :( Download SDFix and save it to your Desktop. Double click SDFix.exe and it will extract the files to...
Separate names with a comma.
