|
Hey there :-)
I need you to run VundoFix & Smitfraud and follow the instructions below.
VundoFix.exe from here:
www.atribune.org/ccount/click.php?id=4
SmitfraudFix from here:
siri.urz.free.fr/Fix/SmitfraudFix.zip
Instructions
1. Please reboot your computer in Safe Mode by doing the following
2. Restart your computer
3. After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually.
4. Instead of Windows loading as normal, a menu with options should appear
5. Select the first option, to run Windows in Safe Mode, then press "Enter".
6. Choose your usual account.
7. When in Safe Mode, Double click on VundoFix.exe
8. Place a tick next to "Run VundoFix" as a task.
9. You will receive a message saying VundoFix will close and re-open in a minute or less.
10. Click "OK".
11. When VundoFix re-opens, click the "Scan for Vundo" button.
12. Once it's done scanning, click the "Remove Vundo" button.
13. You will receive a prompt asking if you want to remove the files, click "Yes".
14. Once you click yes, your desktop will go blank as it starts removing Vundo.
15. When completed, it will prompt that it will shutdown your computer
16. Click "Ok".
17. Turn on your computer.
18. You might have to do the above a couple of times.
19. Extract the contents of SmitfraudFix to your Desktop.
20. Please reboot your computer in Safe Mode by doing the following
21. Restart your computer
22. After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually.
23. Instead of Windows loading as normal, a menu with options should appear
24. Select the first option, to run Windows in Safe Mode, then press "Enter".
25. Choose your usual account.
26. Once in Safe Mode, open the SmitfraudFix folder again
27. Double click on smitfraudfix.cmd
28. Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.
29. You will be prompted : "Registry cleaning - Do you want to clean the registry ?"
30. Answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.
31. The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".
32. The tool may need to restart your computer to finish the cleaning process.
That should do the trick, let us know how it goes.
|
