Just searching it in Google, I found these instructions (I'd personally wait for Cole's suggestion :P)
"please do the following:
Please download Combofix from here:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe Or
http://www.techsupportforum.com/sectool ... mboFix.exe ** Take note that the links are case sensitive
Save ComboFix to the desktop.
1. Double click on combo.exe & follow the prompts.
2. When finished, it will produce a logfile located at C:\ComboFix.txt.
3. Post the contents of that log in your next reply with a new hijackthis log.
Note: Do not mouseclick combofix's window while it is running. That may cause your system to stall/hang.
To cleanup the infected cookies,
Download and scan with CCleaner
1. Starting with v1.27.260, CCleaner installs the Yahoo Toolbar as an option which IS checkmarked by default during the installation. IF you do NOT want it, REMOVE the checkmark when provided with the option OR download the toolbarfree Basic version instead of the Standard Build.
2. Before first use, select Options > Advanced and UNCHECK "Only delete files in Windows Temp folder older than 48 hours"
3. Then select the items you wish to clean up.
In the Windows Tab:
Clean all entries in the "Internet Explorer" section except Cookies.
Clean all the entries in the "Windows Explorer" section.
Clean all entries in the "System" section.
Clean all entries in the "Advanced" section.
Clean any others that you choose.
In the Applications Tab:
Clean all except cookies in the Firefox/Mozilla section if you use it.
Clean all in the Opera section if you use it.
Clean Sun Java in the Internet Section.
Clean any others that you choose.
4. Click the "Run Cleaner" button.
5. A pop up box will appear advising this process will permanently delete files from your system.
6. Click "OK" and it will scan and clean your system.
7. click on issues in the left column > scan for issues > fix all selected issues.
8. Click "exit" when done."
or if that doesn't work, go to
http://www.bleepingcomputer.com/forums/forum22.html and post a HiJackThis log, and they can help, they helped me in a similar problem, but it was redirecting me to "btcar.com"
Sorry if this isn't useful.
_________________
.:Splak|Stormzz
.:Splak|Fusionzz
[Splak Server Administrator]
[Recruitment Moderator and Co-Recruiter]
Got any questions? PM me and i'll try and help.
“You have enemies? Good. That means you've stood up for something, sometime in your life.” - Winston Churchill
Login
Register
FAQ
Search
